topic Re: AppSec Kubernetes Nginx Ingress Controller in WAF

AppSec Kubernetes Nginx Ingress Controller

Shay_Levin — Wed, 14 Jul 2021 05:41:42 GMT

In this video, I walk you through protecting a sample web application running on AWS Kubernetes cluster by Nginx ingress controller

** Check also the attached txt file that includes all the YAML files I used in the video.

Re: AppSec Kubernetes Nginx Ingress Controller

RodRod — Fri, 25 Aug 2023 15:32:08 GMT

Once install helm the ingress controller container run but then..

State: Waiting,
Reason: CrashLoopBackOff

Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Warning RELOAD 55m nginx-ingress-controller Error reloading NGINX:
-------------------------------------------------------------------------------
Error: exit status 1
2023/08/25 04:49:32 [emerg] 34#34: dlopen() "/usr/lib/nginx/modules/ngx_cp_attachment_module.so" failed (Error relocating /usr/lib/libnginx_attachment_util.so: _ZSt28__throw_bad_array_new_lengthv: symbol no
t found) in /tmp/nginx/nginx-cfg3419880913:1
nginx: [emerg] dlopen() "/usr/lib/nginx/modules/ngx_cp_attachment_module.so" failed (Error relocating /usr/lib/libnginx_attachment_util.so: _ZSt28__throw_bad_array_new_lengthv: symbol not found) in /tmp/ngi
nx/nginx-cfg3419880913:1
nginx: configuration file /tmp/nginx/nginx-cfg3419880913 test failed

Re: AppSec Kubernetes Nginx Ingress Controller

yuvalmamka — Sun, 27 Aug 2023 08:52:08 GMT

Hi, try to change to package 4.1.4 and see if the issue resolves.

Re: AppSec Kubernetes Nginx Ingress Controller

RodRod — Mon, 28 Aug 2023 22:05:53 GMT

The error in conteiner was fix with version 4.1.4 now is running, stable and working property, I exposed a juice shop, site. the nano agent container is running:

Host Ports: 0/TCP, 0/TCP, 0/TCP
Args:
/nginx-ingress-controller
--publish-service=$(POD_NAMESPACE)/cp-appsec-cp-k8s-appsec-nginx-ingress-controller
--election-id=ingress-controller-leader
--controller-class=k8s.io/ingress-nginx
--ingress-class=nginx
--configmap=$(POD_NAMESPACE)/cp-appsec-cp-k8s-appsec-nginx-ingress-controller
--validating-webhook=:8443
--validating-webhook-certificate=/usr/local/certificates/cert
--validating-webhook-key=/usr/local/certificates/key
State: Running
Started: Mon, 28 Aug 2023 13:54:45 -0600

BUT never looks like reporting. The console reports as no agent connected.

Re: AppSec Kubernetes Nginx Ingress Controller

RodRod — Tue, 12 Sep 2023 18:04:10 GMT

HELLO TEM THE ISSUE WAS FIXED THE VERSION AVAILABLE NOW IS WORKING.