[Bug]: [Bug]: how upgrade zlib version in nginx-ingress controller in Azure AKS

[harinathreddy8500]

Version

2.0.0

What Kubernetes platforms are you running on?

AKS Azure

Steps to reproduce

I have a issue on zlib version vulnerability, we are trying to upgrade in Zlib version to 1.2.12.-r2 in nginx-ingress controller in Azure AKS but we didn't find the exact way to upgrade.
Currently we are using ingress version is 1.2.1 and Zlib version is 1.2.12-r1
Could you please help on this issue

[github-actions]

Hi @harinathreddy8500 thanks for reporting!

Be sure to check out the docs and the Contributing Guidelines while you wait for a human to take a look at this 🙂

Cheers!

[AlexFenlon]

Hi @harinathreddy8500,

We are very sorry, but this version if the product is outside of our support window now. The oldest version we support now is NGINX Ingress Controller v3.0.2, see our Technical Specifications here. Upgrading to a more current version may also be the best way to upgrade the underlying zlib version.

[harinathreddy8500]

Hi @AlexFenlon ,

Thanks for the information!
we are getting application down 503 error code after update nginx ingress version v1.4.0.
we have changed image v1.3.0 to v1.4.0 in ingress deployment file and created new pod with latest version but after created new pod the application went down with 503 code
could you please help on this issue how to upgrade version without any issue
"503 Service Temporarily Unavailable
nginx"

[jjngx]

Hi @AlexFenlon ,

Thanks for the information! we are getting application down 503 error code after update nginx ingress version v1.4.0. we have changed image v1.3.0 to v1.4.0 in ingress deployment file and created new pod with latest version but after created new pod the application went down with 503 code could you please help on this issue how to upgrade version without any issue "503 Service Temporarily Unavailable nginx"

Hi @harinathreddy8500,

Are you referring to the nginx kubernetes-ingress project or kubernetes/ingress-nginx ?

This project - NGINX Kubernetes-ingress released version 1.4.0 7 years ago. The version is not supported.

If you refer to the latter, the version 1.4.0 was released 3 years ago: v1.4.0

[harinathreddy8500]

Hi @AlexFenlon @haywoodsh
we have updated ingress version
image: registry.k8s.io/ingress-nginx/controller:v1.4.0
app.kubernetes.io/version: 1.4.0
helm.sh/chart: ingress-nginx-4.4.0
after updated and created new pod with latest version v1.4.0 the application is down with "503 Service Temporarily Unavailable nginx"
below error logs we are seeing in ingress pod after updated with v1.4.0
"k8s.io/client-go@v0.25.2/tools/cache/reflector.go:169: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User "system:serviceaccount:ebx-ingress-controller:ingress-nginx" cannot list resource "endpointslices" in API group "discovery.k8s.io" at the cluster scope
E0211 07:04:41.192411 8 reflector.go:140] k8s.io/client-go@v0.25.2/tools/cache/reflector.go:169: Failed to watch *v1.EndpointSlice: failed to list *v1.EndpointSlice: endpointslices.discovery.k8s.io is forbidden: User "system:serviceaccount:ebx-ingress-controller:ingress-nginx" cannot list resource "endpointslices" in API group "discovery.k8s.io" at the cluster scope"

could you please help on this if anything need to be change except above 3 changes in deployment file

Note: If we do rollback with older version v1.3.0 the application up and running

[vepatel]

hi @harinathreddy8500, based on above information it seems like you're using community ingress controller: https://github.com/kubernetes/ingress-nginx/tree/helm-chart-4.4.0. I'd recommend opening an issue in https://github.com/kubernetes/ingress-nginx
See the differences between the two projects: https://docs.nginx.com/nginx-ingress-controller/installation/ingress-nginx