pulumi/pulumi-kubernetes-ingress-nginx

Review signals: 1 connection review, 1 download and execute, 53 known vulnerability.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 5 distinct locations. 2 attributed processes.

Source contains download and execute; review its purpose. Makefile

OSV reports a known vulnerability in this dependency version. 9 distinct locations. 23 findings.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• Component supports strongly typed Helm chart configuration: Real input produced the expected result: Controller

  Source: This component supports all of the configuration options of the [official Helm chart](

  Input: provider/cmd/pulumi-resource-kubernetes-ingress-nginx/schema.json

  Expected: Controller

  Command: <guest-path> package get-schema provider/cmd/pulumi-resource-kubernetes-ingress-nginx/schema.json

  Observed: …Controller", "description": "Strongly-typed NGINX Ingress Controller installation", "keywords": [ "pulumi", "kubernetes", "nginx", "kind/component", "category/infrastructure" ], "homepage": "https://pulumi.io", "license": "Apache-2.0", "repository": "https://github.com/pulumi/pulumi-kubernetes-ingress-nginx", "publisher": "Pulumi", "language": { "csharp": { "namespaces": { "kubernetes-ingress-nginx": "KubernetesIngressNginx" }, "packageReferences": { "Pulumi": "3.*", "Pulumi.Kubernetes": "4.*" }, "res

Examples

• Read the component schema with Pulumi: command completed successfully

  Source: README.md / Configuration

  Input: provider/cmd/pulumi-resource-kubernetes-ingress-nginx/schema.json

  Expected: schema contains the IngressController component

  Command: <guest-path> package get-schema provider/cmd/pulumi-resource-kubernetes-ingress-nginx/schema.json

  Observed: : "object", "additionalProperties": { "type": "object" }, "description": "TCP service key:value pairs Ref: https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/exposing-tcp-udp-services.md." }, "udp": { "type": "object", "additionalProperties": { "type": "object" }, "description": "UDP service key:value pairs Ref: https://github.com/kubernetes/ingress-nginx/blob/main/docs/user-guide/exposing-tcp-udp-services.md." } }, "isComponent": true } } }

Local or hosted: local

Build provider and read its Pulumi package schema

pwd; rg --files -g 'README*' -g 'AGENTS.md' -g 'pyproject.toml' -g 'package.json' -g 'go.mod' -g 'Makefile' -g '.github/**' | head -80; git status --short --branch; git rev-parse HEAD 2>/dev/null; python3 --version; python3 -m pip --version
ls -la; find <guest-path> -maxdepth 3 -type f | head -100
cat README.md; cat Makefile | head -100; cat provider/go.mod; command -v go; go version; command -v pulumi || true; find .coldpass -maxdepth 2 -type f -print
sed -n '1,220p' examples/simple-nginx-go/README.md; sed -n '100,260p' Makefile; cat mise.toml; cat .config/mise.toml; find provider -maxdepth 3 -type f | head -40; ls -la .pulumi 2>/dev/null; command -v pulumictl || true; command -v pulumi || true; command -v node || true; command -v npm || true
cd <guest-path> && go build -o /tmp/pulumi-resource-kubernetes-ingress-nginx ./cmd/pulumi-resource-kubernetes-ingress-nginx
cat provider/cmd/pulumi-resource-kubernetes-ingress-nginx/main.go; head -50 provider/cmd/pulumi-resource-kubernetes-ingress-nginx/schema.json; sed -n '1,140p' examples/simple-nginx-go/main.go 2>/dev/null; cat examples/simple-nginx-go/go.mod; cat .coldpass/* 2>/dev/null
curl -i --max-time 10 "$CDP_URL/json/version"
PULUMI_HOME=<guest-path> curl -fsSL https://get.pulumi.com | sh -s -- --version 3.259.0 --install-root <guest-path>
find provider/pkg -type f -maxdepth 3; sed -n '1,200p' provider/pkg/provider/provider.go
mkdir -p .coldpass; cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<guest-path>","package","get-schema","<guest-path>"],"cwd":"<guest-path>","env":{"PULUMI_HOME":"<guest-path>"},"expected_text":"IngressController"}
EOF
<guest-path> package get-schema provider/cmd/pulumi-resource-kubernetes-ingress-nginx/schema.json
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"Component supports strongly typed Helm chart configuration","source":"This component supports all of the configuration options of the [official Helm chart](","input":"provider/cmd/pulumi-resource-kubernetes-ingress-nginx/schema.json","expected":"Controller","probe_kind":"cli","argv":["<guest-path>","package","get-schema","provider/cmd/pulumi-resource-kubernetes-ingress-nginx/schema.json"],"expected_text":"Controller","cwd":"<guest-path>","env":{"PULUMI_HOME":"<guest-path>"}}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Read the component schema with Pulumi","source":"README.md / Configuration","input":"provider/cmd/pulumi-resource-kubernetes-ingress-nginx/schema.json","expected":"schema contains the IngressController component","argv":["<guest-path>","package","get-schema","provider/cmd/pulumi-resource-kubernetes-ingress-nginx/schema.json"],"cwd":"<guest-path>","env":{"PULUMI_HOME":"<guest-path>"},"expected_text":"IngressController"}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"checks":[],"reason":"Inspected README.md, Makefile and provider entrypoint; the repository provides infrastructure component packaging/deployment and no cron, loop, webhook, --once, or --now cycle."}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Build provider and read its Pulumi package schema","operation_scope":"Pulumi provider build and package schema inspection; deployment additionally requires a Kubernetes cluster","steps":["Read README.md, Makefile and examples/simple-nginx-go/README.md","Built the provider from provider/cmd/pulumi-resource-kubernetes-ingress-nginx with Go; go.mod selected Go 1.25.11","Installed Pulumi 3.259.0 using the Makefile installer pattern","Ran pulumi package get-schema against the checked-in provider schema","Validated and replayed .coldpass/probe.json and .coldpass/claims.json successfully"],"deviations":["The README deployment example requires Kubernetes and a working kubectl context; the guest has no configured cluster, so deployment and kubectl verification were not run.","Shared CDP endpoint check returned HTTP 200 with Chrome/155.0.8059.84; the documented operation did not require browser interaction."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay