haproxy-ingress

• Changelog and release notes: v0.12.6
• Release date: 2021-07-11
• Helm chart: --version 0.12.6
• Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.6
• Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.6
• Embedded HAProxy version: 2.2.14

• Changelog: v0.11.8
• Release date: 2021-07-11
• Helm chart: --version 0.11.8
• Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.11.8
• Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.11.8
• Embedded HAProxy version: 2.1.12

• Changelog: v0.10.9
• Release date: 2021-07-11
• Helm chart: --version 0.10.9
• Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.10.9
• Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.10.9
• Embedded HAProxy version: 2.0.22

Changes since v0.12.4:

• Fix backend match if no ingress use host match #802

Reference:

• Release date: 2021-06-20
• Helm chart: --version 0.12.5
• Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.5
• Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.5
• Embedded HAProxy version: 2.2.14
• Changelog: v0.12.5

Changes since v0.11.6:

• Fix reading of needFullSync status #772
• Fix domain validation on secure backend keys #791
• Use the port name on DNS resolver template #796
• Fix reading of tls secret without crt or key #799
• build: move from travis to github actions 19c275c

Reference:

• Release date: 2021-06-20
• Helm chart: --version 0.11.7
• Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.11.7
• Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.11.7
• Embedded HAProxy version: 2.1.12
• Changelog: v0.11.7

Changes since v0.10.7:

• Use the port name on DNS resolver template #796
• Fix reading of tls secret without crt or key #799
• build: move from travis to github actions 7a81577

Reference:

• Release date: 2021-06-20
• Helm chart: --version 0.10.8
• Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.10.8
• Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.10.8
• Embedded HAProxy version: 2.0.22
• Changelog: v0.10.8

Changes since v0.12.3:

• Fix reading of needFullSync status #772
• Fix per path filter of default host rules #777
• Add option to disable API server warnings #789 doc
  • Command-line options:
    • --disable-api-warnings
• Fix domain validation on secure backend keys #791
• Add ssl-always-add-https config key #793 doc
  • Configuration keys:
    • ssl-always-add-https
• Use the port name on DNS resolver template #796
• Fix reading of tls secret without crt or key #799
• update embedded haproxy from 2.2.13 to 2.2.14 aa0a234
• update client-go from 0.19.0 to 0.19.11 b0b30c8

Reference:

• Release date: 2021-06-17
• Helm chart: --version 0.12.4
• Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.4
• Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.4
• Embedded HAProxy version: 2.2.14
• Changelog: v0.12.4

Main changes since v0.12:

• HAProxy upgrade from 2.2 to 2.3.
• Ingress API upgrade from networking.k8s.io/v1beta1 to networking.k8s.io/v1.
• Partial implementation of Gateway API - doc
• TCP services using ingress resources - doc
• External authetication - doc
• Several new custom configurations - doc

Breaking backward compatibility from v0.12:

• Kubernetes minimal version changed from 1.18 to 1.19.
• External HAProxy minimal version changed from 2.0 to 2.2.
• TLS configuration: v0.12 and older versions add hostnames to the HTTP and HTTPS maps despite the TLS attribute configuration. v0.13 will only add hostnames to the HTTPS map if the Ingress’ TLS attribute lists the hostname, leading to 404 errors on misconfigured clusters. This behavior can be changed with ssl-always-add-https as a global or per hostname configuration, see the configuration doc.
• OAuth2: auth-request.lua was updated and also the haproxy variable name with user’s email address. This update will not impact if neither the Lua script nor the oauth2-headers configuration key were changed.
• OAuth2 with external HAProxy sidecar: the new Lua script has dependency with lua-json4 which should be installed in the external instance.
• Basic Authentication: auth-type configuration key was deprecated and doesn’t need to be used. This will only impact deployments that configures the auth-secret without configuring auth-type - in this scenario v0.12 won’t configure Basic Authentication, but v0.13 will.
• SSL passthrough: Hostnames configured as ssl-passthrough will now add non root paths / of these hostnames to the HAProxy’s HTTP port. v0.12 and older controller versions log a warning and ignore such configuration. HTTPS requests have no impact.

Reference:

• Release date: 2021-06-16
• Helm chart: --version 0.13.0-beta.1 --devel
• Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.13.0-beta.1
• Image (Docker): jcmoraisjr/haproxy-ingress:v0.13.0-beta.1
• Embedded HAProxy version: 2.3.10
• Changelog: v0.13.0-beta.1

Changes since v0.12.2:

• Fix default host if configured as ssl-passthrough #764
• Update embedded haproxy from 2.2.11 to 2.2.13 7394764

Helm chart: --version 0.12.3

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.12.3
• jcmoraisjr/haproxy-ingress:v0.12.3

Embedded HAProxy version: 2.2.13
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v0123

Changes since v0.11.5:

• Fix default host if configured as ssl-passthrough #764

Helm chart: --version 0.11.6

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.11.6
• jcmoraisjr/haproxy-ingress:v0.11.6

Embedded HAProxy version: 2.1.12
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v0116

Changes since v0.10.6:

• Fix default host if configured as ssl-passthrough #764
• Update embedded haproxy from 2.0.21 to 2.0.22 9a57a6c

Helm chart: --version 0.10.7

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.10.7
• jcmoraisjr/haproxy-ingress:v0.10.7

Embedded HAProxy version: 2.0.22
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v0107

This is the last regular release of the v0.9 branch, now only critical fixes should be merged. Note that the embedded HAProxy version is from the 1.9 branch, which is unmaintained since 2020-Q2.

Changes since v0.9.2:

• Allow signer to work with wildcard dns certs #695
• Add path scope #705
• Fix reload failure if admin socket refuses connection #719
• Improve crt validation with ssl_c_verify #743
• Fix initial weight configuration #742
• Fix incorrect reload if endpoint list grows #746
• Fix backend matches if hostname uses wildcard #752
• Fix default host if configured as ssl-passthrough #764

Helm chart: --version 0.9.3

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.9.3
• jcmoraisjr/haproxy-ingress:v0.9.3

Embedded HAProxy version: 1.9.16
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v093

This is the last regular release of the v0.8 branch, now only critical fixes should be merged.

Changes since v0.8.6:

• Fix reload failure if admin socket refuses connection #719
• Update embedded haproxy to 1.8.28 38f0194
• Improve crt validation with ssl_c_verify #743
• Fix initial weight configuration #742
• Fix incorrect reload if endpoint list grows #746
• Fix backend matches if hostname uses wildcard #752
• Fix default host if configured as ssl-passthrough #764
• Update haproxy from 1.8.28 to 1.8.30 91fecdc

Helm chart: --version 0.8.7

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.8.7
• jcmoraisjr/haproxy-ingress:v0.8.7

Embedded HAProxy version: 1.8.30
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v087

Changes since v0.12.1:

• Fix incorrect reload if endpoint list grows #746
• Fix prefix path type if the path matches a domain #756
• Update go from 1.14.(latest) to 1.14.15 0ad978d
• Update embedded haproxy from 2.2.9 to 2.2.11 and fixes CVE-2021-3450 (OpenSSL). 9d12c69

Helm chart: --version 0.12.2

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.12.2
• jcmoraisjr/haproxy-ingress:v0.12.2

Embedded HAProxy version: 2.2.11
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v0122

Changes since v0.11.4:

• Fix incorrect reload if endpoint list grows #746
• Fix prefix path type if the path matches a domain #756
• Update haproxy from 2.1.11 to 2.1.12 and fixes CVE-2021-3450 (OpenSSL). fd4dd10

Helm chart: --version 0.11.5

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.11.5
• jcmoraisjr/haproxy-ingress:v0.11.5

Embedded HAProxy version: 2.1.12
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v0115

Changes since v0.10.5:

• Fix incorrect reload if endpoint list grows #746
• Fix backend matches if hostname uses wildcard #752
• Update haproxy from 2.0.20 to 2.0.21 and fixes CVE-2021-3450 (OpenSSL). 01708b9
• Update go from 1.13.4 to 1.13.15 5bd13b6

Helm chart: --version 0.10.6

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.10.6
• jcmoraisjr/haproxy-ingress:v0.10.6

Embedded HAProxy version: 2.0.21
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v0106

Changes since v0.12:

• Improve crt validation with ssl_c_verify #743
• Remove unix socket before start acme server #740
• Read the whole input when the response fills the buffer #739
• Fix initial weight configuration #742

Helm chart: --version 0.12.1

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.12.1
• jcmoraisjr/haproxy-ingress:v0.12.1

Embedded HAProxy version: 2.2.9
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v0121

Changes since v0.11.3:

• Improve crt validation with ssl_c_verify #743
• Fix initial weight configuration #742

Helm chart: --version 0.11.4

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.11.4
• jcmoraisjr/haproxy-ingress:v0.11.4

Embedded HAProxy version: 2.1.11
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v0114

Changes since v0.10.4:

• Improve crt validation with ssl_c_verify #743
• Fix initial weight configuration #742

Helm chart: --version 0.10.5

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.10.5
• jcmoraisjr/haproxy-ingress:v0.10.5

Embedded HAProxy version: 2.0.20
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v0105

Main changes since v0.11:

• HAProxy upgrade from 2.1 to 2.2.
• IngressClass support
• Ability to configure and run an external haproxy, version 2.0 or above, on a sidecar container. See the example.

Breaking backward compatibility from v0.11:

• Kubernetes version 1.18 or newer.
• Ingress resources without kubernetes.io/ingress.class annotation were listened to by default up to v0.11, now they are not. This will change the final configuration of clusters that 1) have Ingress resources without the class annotation and without the ingressClassName field, and 2) does not declare the --ignore-ingress-without-class command-line option. Add the command-line option --watch-ingress-without-class to bring back the default v0.11 behavior. See the class matter documentation.
• HAProxy Ingress service account needs get, list and watch access to the ingressclass resource from the networking.k8s.io api group.
• The default backend configured with --default-backend-service does not have a fixed name _default_backend anymore, but instead a dynamic name based on the namespace, service name and listening port number of the target service, as any other backend. This will break configuration snippets that use the old name.

Helm chart: --version 0.12.0

Docker images:

• quay.io/jcmoraisjr/haproxy-ingress:v0.12
• jcmoraisjr/haproxy-ingress:v0.12

Embedded HAProxy version: 2.2.9
Changelog: https://github.com/jcmoraisjr/haproxy-ingress/blob/master/CHANGELOG.md#v012