[ANNOUNCE] haproxy-ingress v0.13.12

3 views
Skip to first unread message

Joao Morais

unread,
Jun 5, 2023, 8:05:05 AM6/5/23
to haproxy...@googlegroups.com
HAProxy Ingress v0.13.12 is here!

This release fixes some issues found in the v0.13 branch:

- External HAProxy was failing with the message "cannot open the file
'/var/lib/haproxy/crt/default-fake-certificate.pem'.". This happened
due to missing permission to read certificate and private key files
when HAProxy container starts as non root, which is the default since
HAProxy 2.4.
- ConfigMap based TCP services was randomly missing when the
controller started, being reincluded only after the first
reconciliation.

Other notable changes include:

- An update to the External HAProxy example page adds options to fix
permission failures to bind ports `:80` and `:443`, see the example
page: https://haproxy-ingress.github.io/v0.13/docs/examples/external-haproxy/#a-word-about-security

Dependencies:

- Update client-go from v0.23.16 to v0.23.17

Links and refs of this release:

* Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG/CHANGELOG-v0.13.md#v01312
* GitHub release:
https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.13.12
* Release date: 2023-06-05
* Helm chart: --version 0.13.12
* Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.13.12
* Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.13.12
* Embedded HAProxy version: 2.4.22

List of merged fixes and improvements since v0.13.11:

* Fixes configmap based tcp sync [#1001]
* Ensure predictable tcp by sorting endpoints [#1003]
* Change owner of crt/key files to haproxy pid [#1004]
* update client-go from v0.23.16 to v0.23.17 [2f3abbb]
* add security considerations on external haproxy [d21dc67]
Reply all
Reply to author
Forward
0 new messages