AppSec Kubernetes Nginx Ingress Controller

[Shay_Levin]

In this video, I walk you through protecting  a sample web application running on AWS Kubernetes cluster by Nginx ingress controller 

** Check also the attached txt file that includes all the YAML files I used in the video. 

[RodRod]

Once install helm the ingress controller container run but then..

State: Waiting, 
Reason: CrashLoopBackOff 

Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Warning RELOAD 55m nginx-ingress-controller Error reloading NGINX:
-------------------------------------------------------------------------------
Error: exit status 1
2023/08/25 04:49:32 [emerg] 34#34: dlopen() "/usr/lib/nginx/modules/ngx_cp_attachment_module.so" failed (Error relocating /usr/lib/libnginx_attachment_util.so: _ZSt28__throw_bad_array_new_lengthv: symbol no
t found) in /tmp/nginx/nginx-cfg3419880913:1
nginx: [emerg] dlopen() "/usr/lib/nginx/modules/ngx_cp_attachment_module.so" failed (Error relocating /usr/lib/libnginx_attachment_util.so: _ZSt28__throw_bad_array_new_lengthv: symbol not found) in /tmp/ngi
nx/nginx-cfg3419880913:1
nginx: configuration file /tmp/nginx/nginx-cfg3419880913 test failed

[yuvalmamka]

Hi, try  to change to package 4.1.4 and see if the issue resolves.

[RodRod]

The error in conteiner was fix with version 4.1.4 now is running, stable and working property, I exposed a juice shop, site. the nano agent container is running: 

Host Ports: 0/TCP, 0/TCP, 0/TCP
Args:
/nginx-ingress-controller
--publish-service=$(POD_NAMESPACE)/cp-appsec-cp-k8s-appsec-nginx-ingress-controller
--election-id=ingress-controller-leader
--controller-class=k8s.io/ingress-nginx
--ingress-class=nginx
--configmap=$(POD_NAMESPACE)/cp-appsec-cp-k8s-appsec-nginx-ingress-controller
--validating-webhook=:8443
--validating-webhook-certificate=/usr/local/certificates/cert
--validating-webhook-key=/usr/local/certificates/key
State: Running
Started: Mon, 28 Aug 2023 13:54:45 -0600

BUT never looks like reporting. The console reports as no agent connected. 

[RodRod]

HELLO TEM THE ISSUE WAS FIXED THE VERSION AVAILABLE NOW IS WORKING.