An issue with discussion: https://github.com/kubernetes/ingress-nginx/issues/7837

The only fix so far is removing the feature.

>According to the publication, multi-tenant environments where non-admin users have permissions to create Ingress objects are most affected by this issue.

Ouch! I guess this means lots of secret/password rotations for k8s admins coming soon. I've always wondered if there are public Kubernetes multi-tenant setups in the wild rather than just ones with admins and developer roles/namespaces.