HAProxy Ingress v0.13.12 is here!
This release fixes some issues found in the v0.13 branch:
- External HAProxy was failing with the message "cannot open the file
'/var/lib/haproxy/crt/default-fake-certificate.pem'.". This happened
due to missing permission to read certificate and private key files
when HAProxy container starts as non root, which is the default since
HAProxy 2.4.
- ConfigMap based TCP services was randomly missing when the
controller started, being reincluded only after the first
reconciliation.
Other notable changes include:
- An update to the External HAProxy example page adds options to fix
permission failures to bind ports `:80` and `:443`, see the example
page:
https://haproxy-ingress.github.io/v0.13/docs/examples/external-haproxy/#a-word-about-security
Dependencies:
- Update client-go from v0.23.16 to v0.23.17
Links and refs of this release:
* Changelog:
https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG/CHANGELOG-v0.13.md#v01312
* GitHub release:
https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.13.12
* Release date: 2023-06-05
* Helm chart: --version 0.13.12
* Image (Quay):
quay.io/jcmoraisjr/haproxy-ingress:v0.13.12
* Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.13.12
* Embedded HAProxy version: 2.4.22
List of merged fixes and improvements since v0.13.11:
* Fixes configmap based tcp sync [#1001]
* Ensure predictable tcp by sorting endpoints [#1003]
* Change owner of crt/key files to haproxy pid [#1004]
* update client-go from v0.23.16 to v0.23.17 [2f3abbb]
* add security considerations on external haproxy [d21dc67]