Nginx-ingress-controller upgrade to 0.25.1

Rancher
1

I have a rancher 2.2.8 (w/ kubernetes v1.13.10) implementation that is managing 3 clusters, all at v1.13.10

The nginx-ingress-controller version is rancher/nginx-ingress-controller:0.21.0-rancher3, which has nginx v1.15.6. That version has CVE-2019-9511, CVE-2019-9513, & CVE-2019-9516. It looks like this is resolved w/ ingress-nginx 0.25.1.

Will that be incorporated into a future rancher release or is there a manual upgrade process that needs to be completed to upgrade the ingress controller separately?

2

This is covered in https://github.com/rancher/rancher/issues/21826

3

Thanks for the info. If Iā€™m reading that correctly it is currently part of v2.3, would that eventually get back-ported to a v2.2.x release?

1 Like
4

This is tracked in https://github.com/rancher/rancher/issues/22940