EKS update: ingress-nginx

[jakemulley]

Background

We currently use ingress-nginx v1.6.4 and the latest supported version for EKS v1.24 is v1.8.4 (as at 17/10/2023).

We should update it to use the latest supported version for our EKS cluster.

Proposed user journey

Approach

• check the ingress-nginx CHANGELOG for any breaking changes
• update the helm chart

Which part of the user docs does this impact

Communicate changes

• post for #cloud-platform-update
• Weeknotes item
• Show the Thing/P&A All Hands/User CoP
• Announcements channel

Questions / Assumptions

Definition of done

• readme has been updated
• user docs have been updated
• another team member has reviewed
• smoke tests are green
• prepare demo for the team

Reference

How to write good user stories

[jaskaransarkaria]

https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
There's an ingress-nginx issue tracking a fix

This has increased in priority given the http/2 zero day vulnerability above

[poornima-krishnasamy]

kubernetes/ingress-nginx#10520

[jakemulley]

kubernetes/ingress-nginx#10519 has now been released 👍🏼

[poornima-krishnasamy]

Current Chart: 4.5.2.
App version: 1.6.4

[poornima-krishnasamy]

Upgrade PR: ministryofjustice/cloud-platform-terraform-ingress-controller#69