[ANNOUNCE] haproxy-ingress v0.12.17

3 views
Skip to first unread message

Joao Morais

unread,
Jun 5, 2023, 8:04:01 AM6/5/23
to haproxy...@googlegroups.com
HAProxy Ingress v0.12.17 is here!

This release fixes External HAProxy failure with message "cannot open
the file '/var/lib/haproxy/crt/default-fake-certificate.pem'.". This
happened due to missing permission to read certificate and private key
files when HAProxy container starts as non root, which is the default
since HAProxy 2.4.

Other notable changes include:

- An update to the External HAProxy example page adds options to fix
permission failures to bind ports `:80` and `:443`, see the example
page: https://haproxy-ingress.github.io/v0.12/docs/examples/external-haproxy/#a-word-about-security

Links and refs of this release:

* Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG/CHANGELOG-v0.12.md#v01217
* GitHub release:
https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.17
* Release date: 2023-06-05
* Helm chart: --version 0.12.17
* Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.17
* Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.17
* Embedded HAProxy version: 2.2.29

Changes since v0.12.16:

* Ensure predictable tcp by sorting endpoints [#1003]
* Change owner of crt/key files to haproxy pid [#1004]
* add security considerations on external haproxy [520ca15]
Reply all
Reply to author
Forward
0 new messages