Web_Application_Routing Ingress Controller with libxml2 vulnerability

Question

Hi All,

We are using AKS, but recently we have one libxml2 vulnerability for AKS Web_Application_Routing Ingress Controller.

AKS version: 1.28.5

Nginx Controller Image for Web_Application_Routing: mcr.microsoft.com/oss/kubernetes/ingress/nginx-ingress-controller:v1.9.4

I have tried to amend the image version from v1.9.4 to v.1.10.0 in ingress controller yaml file. but it restored after i amend.

So i don't know how to upgrade the image version.

And is there any solution for it without using other ingress controller?

Thanks.

Answer 1

Hi Kawen,

How have you installed your nginx-ingress-controller?
Was it installed via Microsoft's Addon - https://learn.microsoft.com/en-us/azure/aks/app-routing?tabs=default%2Cdeploy-app-default? or was it via HEML charts?

If it was via Addon, unfortunately you won't be able to update it yourself, this is a managed nginx-ingress-controller and therefore the upgrade will be performed by Microsoft's end when possible and if you try to change it, indeed this change will be overwritten again.
If it was via HELM charts, you can consider on updating the charts and then update the deployment:
$helm repo update <name of the repo>

$helm upgrade --reuse-values ingress-nginx ingress-nginx/ingress-nginx

For more information, please check documentations:https://helm.sh/docs/helm/helm_repo_update/
https://kubernetes.github.io/ingress-nginx/deploy/upgrade/#with-helm
https://learn.microsoft.com/en-us/azure/aks/app-routing?tabs=default%2Cdeploy-app-default