Update Ingress Nginx Chart

[ronardcaktus]

Some people at Wiz wrote a great post about this: https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities

Ingress Nginx version update (and other packages)

Ingress Nginx

> helm -n ingress-nginx list 
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART                   APP VERSION
ingress-nginx   ingress-nginx   10              2025-03-26 10:57:17.291342 -0400 EDT    deployed        ingress-nginx-4.11.5    1.11.5  

Cert Manager

> helm -n cert-manager list
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART                   APP VERSION
cert-manager    cert-manager    9               2025-03-26 10:58:38.865938 -0400 EDT    deployed        cert-manager-v1.17.1    v1.17.1  

New Relic

> helm -n newrelic list    
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART                   APP VERSION
newrelic-bundle newrelic        9               2025-03-26 10:59:56.140238 -0400 EDT    deployed        nri-bundle-5.0.117                

Ensure the admission webhook endpoint is not exposed externally

> kubectl get svc -n ...-production
NAME           TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)    AGE
app            ClusterIP   [IP Num here]    <none>        8000/TCP   4y218d
beat-service   ClusterIP   None            <none>        <none>     4y218d
redis          ClusterIP   [IP Num here]    <none>        6379/TCP   4y218d

 > kubectl get svc -n ...-staging   
NAME           TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)    AGE
app            ClusterIP   [IP Num here]    <none>        8000/TCP   4y218d
beat-service   ClusterIP   None             <none>        <none>     4y218d
redis          ClusterIP   [IP Num here]     <none>        6379/TCP   4y218d

Traffic Stops svc is of type ClusterIP. ClusterIP services are only accessible from within the cluster, you cannot directly curl it from outside. More on that here.

Closes:

• https://app.clickup.com/t/868d7jm29

[copelco]

Task linked: CU-868d7jm29 Forward Justice