[Release-1.28] - Modsecurity does not work in new releases (nginx-ingress-controller:v1.10.1)

[dereknola]

Backport fix for Modsecurity does not work in new releases (nginx-ingress-controller:v1.10.1)

• Modsecurity does not work in new releases (nginx-ingress-controller:v1.10.1) #6411

[aganesh-suse]

PR Update: #6613

Validated on release-1.28 branch with commit 466525b

Environment Details

Infrastructure

• Cloud
• Hosted

Node(s) CPU architecture, OS, and Version:

$ cat /etc/os-release
PRETTY_NAME="Ubuntu 22.04.2 LTS"

$ uname -m
x86_64

Cluster Configuration:

HA : 1 server

Config.yaml:

token: xxxx
write-kubeconfig-mode: "0644"
node-external-ip: 1.1.1.1

Additional files

Testing Steps

1. Copy config.yaml

$ sudo mkdir -p /etc/rancher/rke2 && sudo cp config.yaml /etc/rancher/rke2

2. Install RKE2

curl -sfL https://get.rke2.io | sudo INSTALL_RKE2_COMMIT='466525b7cc654d59c101ddb27fec409a10940a5b' INSTALL_RKE2_TYPE='server' INSTALL_RKE2_METHOD=tar sh -

3. Start the RKE2 service

$ sudo systemctl enable --now rke2-server
or 
$ sudo systemctl enable --now rke2-agent

4. Verify Cluster Status:

kubectl get nodes -o wide
kubectl get pods -A

Validation Results:

• rke2 version used for validation:

$ rke2 -v
rke2 version v1.28.13+dev.466525b7 (466525b7cc654d59c101ddb27fec409a10940a5b)
go version go1.22.5 X:boringcrypto

a pod describe of nginx-ingress-controller displays:

Events: 
Successfully pulled image "rancher/nginx-ingress-controller:v1.10.4-hardened2"

Containers:
  rke2-ingress-nginx-controller:
    Container ID:    containerd://0b57e896d95d0b64da37d0dec283f67917da976a6b09d39f3d30153ec09ee8f6
    Image:           rancher/nginx-ingress-controller:v1.10.4-hardened2

kubernetes cluster image list:

docker.io/rancher/nginx-ingress-controller                           v1.10.4-hardened2              4e79c3fed8432       296MB