Sticky session annotation cross-affecting ingresses

[michaelgeorgeattard]

Is this a request for help? (If yes, you should use our troubleshooting guide and community support channels, see https://kubernetes.io/docs/tasks/debug-application-cluster/troubleshooting/.):

What keywords did you search in NGINX Ingress controller issues before filing this one? (If you have found any duplicates, you should instead reply there.):

---

Is this a BUG REPORT or FEATURE REQUEST? (choose one): BUG REPORT

NGINX Ingress controller version: 0.19.0

Kubernetes version (use kubectl version): v1.10.7

Environment:

• Cloud provider or hardware configuration: AWS
• OS (e.g. from /etc/os-release):
• Kernel (e.g. uname -a):
• Install tools:
• Others:

What happened:

We have two ingresses, one with sticky session annotations, one without:

{
  "kind": "Ingress",
  "apiVersion": "extensions/v1beta1",
  "metadata": {
    "name": "one",
    "annotations": {
      "nginx.ingress.kubernetes.io/rewrite-target": "/"
    }
  },
  "spec": {
    "rules": [
      {
        "host": "foo.bar.com",
        "http": {
          "paths": [
            {
              "path": "/common/v1",
              "backend": {
                "serviceName": "service-a",
                "servicePort": 1002
              }
            }
          ]
        }
      }
    ]
  }
}

{
  "kind": "Ingress",
  "apiVersion": "extensions/v1beta1",
  "metadata": {
    "name": "two",
    "annotations": {
      "nginx.ingress.kubernetes.io/affinity": "cookie",
      "nginx.ingress.kubernetes.io/rewrite-target": "/real-time",
      "nginx.ingress.kubernetes.io/session-cookie-hash": "sha1",
      "nginx.ingress.kubernetes.io/session-cookie-name": "sticky"
    }
  },
  "spec": {
    "rules": [
      {
        "host": "foo.bar.com",
        "http": {
          "paths": [
            {
              "path": "/common/v1/real-time",
              "backend": {
                "serviceName": "service-a",
                "servicePort": 1002
              }
            }
          ]
        }
      }
    ]
  }
}

Both curl foo.bar.com/common/v1 and curl foo.bar.com/common/v1/real-time show Set-Cookie: sticky=3bda432b6d65261863c79208ea1c156652e905a7; Domain=foo.bar.com; Path=/; HttpOnly

What you expected to happen:

Only curl foo.bar.com/common/v1/real-time should apply the sticky cookie.

How to reproduce it (as minimally and precisely as possible):

Anything else we need to know:

Looks like stick annotations are per service rather then per ingress.

[michaelgeorgeattard]

Fixed temporarily by targeting separate (cloned) services by the two ingresses.

[ElvinEfendi]

Please use https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.21.0 - this should be fixed in that version.

/close

[k8s-ci-robot]

@ElvinEfendi: Closing this issue.

In response to this:

Please use https://github.com/kubernetes/ingress-nginx/releases/tag/nginx-0.21.0 - this should be fixed in that version.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.