<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body>
<div>
<div dir="ltr">Will do, thanks.</div>
</div>
<div id="ms-outlook-mobile-signature">
<div></div>
</div>
<br><div id="signature-365-signature"><div style="color: black; font-size: 11pt; font-family: Calibri, Candara, Segoe, Segoe UI, Optima, Arial, sans-serif">
<br><br><br>
<table style="height: 150px;" border="0" width="600" cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 150px;">
<td style="font-family:Arial, Helvetica Neue, Helvetica, sans-serif;color:rgb(0, 0, 0);font-size:10pt;font-weight:normal;text-align:left;vertical-align:top;white-space:nowrap;height:150px" width="204"><br>
<table style="height: 42px; width: 35.619781%;" border="0" width="154" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="font-family:Arial, Helvetica Neue, Helvetica, sans-serif;color:rgb(0, 0, 0);font-size:10pt;font-weight:normal;text-align:left;vertical-align:top;white-space:nowrap;padding-right:34px;width:100%"><img src="cid:image001.jpg@5ed8d0511e0a448c807cf45f34ca5bb9" alt="" width="184" height="92" style="border-top-width:0;border-right-width:0;border-bottom-width:0;border-left-width:0"></td>
</tr>
</tbody>
</table>
</td>
<td style="font-family:Arial, Helvetica Neue, Helvetica, sans-serif;color:rgb(0, 0, 0);font-size:10pt;font-weight:normal;text-align:left;vertical-align:top;white-space:nowrap;padding-left:30px;border-left-width:2px;border-left-style:solid;border-left-color:#00577f;height:150px">
<table border="0" width="100%" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="font-family:Arial, Helvetica Neue, Helvetica, sans-serif;color:rgb(0, 0, 0);font-size:10pt;font-weight:normal;text-align:left;vertical-align:top;white-space:nowrap"><span style="font-family:Arial, Helvetica Neue, Helvetica, sans-serif;color:rgb(0, 0, 0);font-weight:normal;font-size:12pt"><span style="font-family:Arial, Helvetica Neue, Helvetica, sans-serif;font-size:10pt;font-weight:normal;color:#00577f"><strong>Brad Bishop</strong></span> </span><br><span style="font-family:Arial, Helvetica Neue, Helvetica, sans-serif;color:rgb(0, 0, 0);font-weight:normal;font-size:8pt">Software Developer <br><br>+64 3 376 4525<br>Level 1, 518 Colombo Street, <br>Christchurch 8011, New Zealand<br><br><span style="font-family:Arial, Helvetica Neue, Helvetica, sans-serif;color:rgb(0, 0, 0);font-weight:normal;font-size:10pt"><a style="font-family:Arial, Helvetica Neue, Helvetica, sans-serif;color:rgb(0, 0, 0);font-size:10pt;font-weight:normal;text-decoration:none" href="https://stp.co.nz" target="_blank" rel="noopener"><span style="font-family:Arial, Helvetica Neue, Helvetica, sans-serif;font-size:10pt;font-weight:normal;color:#00577f"><strong>stp.co.nz</strong></span></a></span><br></span></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table></div></div><br><hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> nginx <nginx-bounces@nginx.org> on behalf of J Carter <jordanc.carter@outlook.com><br>
<b>Sent:</b> Friday, December 8, 2023 10:56:57 PM<br>
<b>To:</b> nginx@nginx.org <nginx@nginx.org><br>
<b>Subject:</b> Re: NIC deletes all listeners when rejecting new listener on reserved port</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">[You don't often get email from jordanc.carter@outlook.com. Learn why this is important at
<a href="https://aka.ms/LearnAboutSenderIdentification">https://aka.ms/LearnAboutSenderIdentification</a> ]<br>
<br>
Hi Brad,<br>
<br>
I'd recommend raising your concern the NIC Github repo's issue tracker.<br>
<br>
<a href="https://github.com/nginxinc/kubernetes-ingress/issues">https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnginxinc%2Fkubernetes-ingress%2Fissues&data=05%7C02%7Cb.bishop%40stp.co.nz%7C472235cf4ee94fc960aa08dbf7d40f98%7C5265a077601f4313b5e9946c239ec817%7C1%7C0%7C638376328252310922%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ztY5XRbYO2%2FnYPCuGNNWtorCYVupeqYgZxw0OEkCjTg%3D&reserved=0</a><br>
<br>
<br>
On Fri, 8 Dec 2023 04:55:12 +0000<br>
Brad Bishop via nginx <nginx@nginx.org> wrote:<br>
<br>
> Hi Folks,<br>
><br>
> We're using NGINX Ingress Controller 3.0.2 (NGINX 1.23.3) in AKS on a couple AKSUbuntu-2204gen2containerd-202309.06.0 nodes. We do regular helm release installs of a single-tenanted TCP & HTTP service for law firms. Today we had a P1 issue when we added a
listener for a new law firm to GlobalConfiguration and set the port number to 9113. NGINX rejected the change because 9113 is reserved for prometheus - fair enough. But it also immediately deleted all other existing listeners, which broke 100 TransportServers
and blocked access to 100 law firms. We reproduced this on a second AKS cluster. Is this the intended behaviour?<br>
><br>
> I expected in this case that NGINX would reject the bad config and revert to last-good config, and the docs suggest this is what should happen:<br>
> <a href="https://docs.nginx.com/nginx-ingress-controller/configuration/global-configuration/globalconfiguration-resource/#:~:text=the%20Ingress%20Controller%20will%20ignore%20the%20new%20version">
https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.nginx.com%2Fnginx-ingress-controller%2Fconfiguration%2Fglobal-configuration%2Fglobalconfiguration-resource%2F%23%3A~%3Atext%3Dthe%2520Ingress%2520Controller%2520will%2520ignore%2520the%2520new%2520version&data=05%7C02%7Cb.bishop%40stp.co.nz%7C472235cf4ee94fc960aa08dbf7d40f98%7C5265a077601f4313b5e9946c239ec817%7C1%7C0%7C638376328252310922%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=JZqVSxsr3JyFAtUEa%2ByLnpaW5%2FdabvQJc8qUkBmfkgg%3D&reserved=0</a><br>
><br>
> Thanks,<br>
> Brad Bishop<br>
_______________________________________________<br>
nginx mailing list<br>
nginx@nginx.org<br>
<a href="https://mailman.nginx.org/mailman/listinfo/nginx">https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmailman.nginx.org%2Fmailman%2Flistinfo%2Fnginx&data=05%7C02%7Cb.bishop%40stp.co.nz%7C472235cf4ee94fc960aa08dbf7d40f98%7C5265a077601f4313b5e9946c239ec817%7C1%7C0%7C638376328252310922%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=RD18v3ghjPUXTfm3azMx6ZZcKab4scBm%2FUchvRsrwEU%3D&reserved=0</a><br>
</div>
</span></font></div>
</body>
</html>