[ANNOUNCE] haproxy-ingress v0.14.7

0 views
Skip to first unread message

Joao Morais

unread,
Jun 16, 2024, 6:17:32 PM (4 days ago) Jun 16
to haproxy...@googlegroups.com
HAProxy Ingress v0.14.7 is here!

This release updates the embedded haproxy version, and fixes some
issues found in the v0.14 branch:

- Julien fixed the Vary response header, from Cors, when the backend
server returns two or more headers
- tomklapka and Jan implemented a more fine grained response from Coraza WAF
- HAProxy process, when embedded and in master-worker mode, was being
prematurelly stopped on rolling updates because it was configured in
the same pid group of the controller
- Fix backend selection, when a more generic wildcard hostname was
being incorrectly chosen, and it colides with a more specific one
which uses mTLS
- Secure backend configuration, like backend protocol and client side
mTLS, can now be configured globally for all ingress resources
- Auth external configuration can now be configured globally
- Make sure https redirect happens before path redirect when
`app-root` is configured
- Added the steps to configure the embedded HAProxy process to log to
stdout, along with controller, useful on dev or small test
environments. See doc:
https://haproxy-ingress.github.io/v0.14/docs/configuration/keys/#syslog
- Added two distinct helm configurations on the getting started guide:
one that uses a service load balancer, another one that uses http/s
ports assigned to the cluster nodes. See doc:
https://haproxy-ingress.github.io/v0.14/docs/getting-started/

Dependencies:

- embedded haproxy from 2.4.25 to 2.4.26

Links and refs of this release:

* Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG/CHANGELOG-v0.14.md#v0147
* GitHub release:
https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.14.7
* Release date: 2024-06-16
* Helm chart: --version 0.14.7
* Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.14.7
* Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.14.7
* Embedded HAProxy version: 2.4.26

Fixes and improvements since v0.14.6:

* Keep all vary header values when adding Origin [#1083] (Jul13nT)
* Fix coraza configuration to use the action variable [#1094]
(tomklapka,JanHolger)
* Ensure https redirect happens before root redirect [#1117] (jcmoraisjr)
* Add ssl-always-follow-redirect option [#1118] (jcmoraisjr)
* Configuration keys:
* ssl-always-follow-redirect
* Allows secure backend configuration from global [#1119] (jcmoraisjr)
* Allows to configure auth-url globally [#1120] (jcmoraisjr)
* Remove dedicated maps for SNI match [#1133] (jcmoraisjr)
* Move embedded haproxy process to a distinct pid group [#1136] (jcmoraisjr)
* Local building improvements [#1135] (jcmoraisjr)
* Update linter [#1104] (jcmoraisjr)
* doc: add haproxy logging to stdout [#1138] (jcmoraisjr)
* doc: reorg items and improve helm values in getting started [#1145]
(jcmoraisjr)
* update embedded haproxy from 2.4.25 to 2.4.26 [5d51114] (Joao Morais)
* update dependencies due to cve [b454bfd] (Joao Morais)

Chart improvements since v0.14.6:

* Fix install output message [#81] (jcmoraisjr)
Reply all
Reply to author
Forward
0 new messages