Skip to content

Latest commit

 

History

History
881 lines (629 loc) · 43.2 KB

CHANGELOG-v0.12.md

File metadata and controls

881 lines (629 loc) · 43.2 KB
Raw

CHANGELOG v0.12 branch

Major improvements

Highlights of this version

  • HAProxy upgrade from 2.1 to 2.2.
  • IngressClass resource support.
  • Ability to configure and run an external haproxy, version 2.0 or above, on a sidecar container.

Upgrade notes

Breaking backward compatibility from v0.11

  • Kubernetes version 1.18 or newer.
  • Ingress resources without kubernetes.io/ingress.class annotation was listened by default up to v0.11, now they are not. This will change the final configuration of clusters that 1) have Ingress resources without the class annotation and without the ingressClassName field, and 2) does not declare the --ignore-ingress-without-class command-line option. Add the command-line option --watch-ingress-without-class to bring back the default v0.11 behavior. See the class matter documentation.
  • HAProxy Ingress service account needs get, list and watch access to the ingressclass resource from the networking.k8s.io api group.
  • The default backend configured with --default-backend-service does not have a fixed name _default_backend anymore, but instead a dynamic name based on the namespace, service name and listening port number of the target service, as any other backend. This will break configuration snippets that uses the old name.

Contributors

v0.12.21

Reference (r21)

  • Release date: 2024-06-16
  • Helm chart: --version 0.12.21
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.21
  • Image (Docker Hub): docker.io/jcmoraisjr/haproxy-ingress:v0.12.21
  • Embedded HAProxy version: 2.2.33
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.21

Release notes (r21)

This release updates the embedded haproxy version, and fixes some issues found in the v0.12 branch:

  • Secure backend configuration, like backend protocol and client side mTLS, can now be configured globally for all ingress resources
  • Make sure https redirect happens before path redirect when app-root is configured

Dependencies:

  • embedded haproxy from 2.2.32 to 2.2.33
  • go from 1.17.13 to 1.18.10

Fixes and improvements (r21)

New features and improvements since v0.12.20:

  • Ensure https redirect happens before root redirect #1117 (jcmoraisjr)
  • Allows secure backend configuration from global #1119 (jcmoraisjr)
  • doc: add haproxy logging to stdout #1138 (jcmoraisjr)
  • update embedded haproxy from 2.2.32 to 2.2.33 1c3d273 (Joao Morais)
  • update dependencies due to cve b510fe2 (Joao Morais)
  • update go from 1.17.13 to 1.18.10 as a x/net dependency 7fd9b1d (Joao Morais)

Chart improvements since v0.12.20:

  • Fix install output message #81 (jcmoraisjr)

v0.12.20

Reference (r20)

  • Release date: 2024-01-24
  • Helm chart: --version 0.12.20
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.20
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.20
  • Embedded HAProxy version: 2.2.32
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.20

Release notes (r20)

This is a security release that updates the embedded HAProxy, the Alpine base image, and cryptographic related dependencies.

Dependencies:

  • embedded haproxy from 2.2.31 to 2.2.32

Fixes and improvements (r20)

New features and improvements since v0.12.19:

  • update embedded haproxy from 2.2.31 to 2.2.32 86d6b41 (Joao Morais)
  • update dependencies 96c71a6 (Joao Morais)

v0.12.19

Reference (r19)

  • Release date: 2023-09-01
  • Helm chart: --version 0.12.19
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.19
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.19
  • Embedded HAProxy version: 2.2.31
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.19

Release notes (r19)

This release updates embedded HAProxy, which fixes some major issues regarding header parsing. See the full HAProxy changelog: https://www.mail-archive.com/haproxy@formilux.org/msg43903.html

Dependencies:

  • embedded haproxy from 2.2.30 to 2.2.31

Fixes and improvements (r19)

New features and improvements since v0.12.18:

  • update embedded haproxy from 2.2.30 to 2.2.31 af837e5 (Joao Morais)

v0.12.18

Reference (r18)

  • Release date: 2023-07-07
  • Helm chart: --version 0.12.18
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.18
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.18
  • Embedded HAProxy version: 2.2.30
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.18

Release notes (r18)

This release fixes some issues found in the v0.12 branch:

  • A wildcard was not being accepted by the CORS Allowed Header configuration
  • Unused HAProxy backends might leak in the configuration, depending on how the configuration is changed, when backend sharding is enabled
  • ConfigMap based TCP services were making HAProxy to reload without need, depending on the order that service endpoints were being listed

Dependencies:

  • embedded haproxy from 2.2.29 to 2.2.30

Fixes and improvements (r18)

New features and improvements since v0.12.17:

  • Create endpoints on a predictable order #1011 (jcmoraisjr)
  • Fix shard render when the last backend is removed #1015 (jcmoraisjr)
  • Add wildcard as a valid cors allowed header #1016 (jcmoraisjr)
  • update embedded haproxy from 2.2.29 to 2.2.30 3b57c0f (Joao Morais)

v0.12.17

Reference (r17)

  • Release date: 2023-06-05
  • Helm chart: --version 0.12.17
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.17
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.17
  • Embedded HAProxy version: 2.2.29
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.17

Release notes (r17)

This release fixes External HAProxy failure with message "cannot open the file '/var/lib/haproxy/crt/default-fake-certificate.pem'.". This happened due to missing permission to read certificate and private key files when HAProxy container starts as non root, which is the default since HAProxy 2.4.

Other notable changes include:

  • An update to the External HAProxy example page adds options to fix permission failures to bind ports :80 and :443, see the example page.

Fixes and improvements (r17)

New features and improvements since v0.12.16:

  • Ensure predictable tcp by sorting endpoints #1003 (jcmoraisjr)
  • Change owner of crt/key files to haproxy pid #1004 (jcmoraisjr)
  • add security considerations on external haproxy 520ca15 (Joao Morais)

v0.12.16

Reference (r16)

  • Release date: 2023-02-14
  • Helm chart: --version 0.12.16
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.16
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.16
  • Embedded HAProxy version: 2.2.29
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.16

Release notes (r16)

This release fixes CVE-2023-25725 on HAProxy. See HAProxy's release notes regarding the issue and a possible work around: https://www.mail-archive.com/haproxy@formilux.org/msg43229.html

Dependencies:

  • Embedded HAProxy version was updated from 2.2.28 to 2.2.29.

Fixes and improvements (r16)

New features and improvements since v0.12.15:

  • update dependencies da0b333 (Joao Morais)
  • update embedded haproxy from 2.2.28 to 2.2.29 e705b51 (Joao Morais)

v0.12.15

Reference (r15)

  • Release date: 2023-02-10
  • Helm chart: --version 0.12.15
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.15
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.15
  • Embedded HAProxy version: 2.2.28
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.15

Release notes (r15)

Warning: due to the update of some old dependencies with vulnerability, the Go version used to compile this release was updated from 1.14 to 1.17, and client-go was updated from v0.19 to v0.21.

This release fixes the following issues:

  • Service resources accept annotations just like ingress ones. However services annotated with path scoped annotations, like haproxy-ingress.github.io/cors-enable and haproxy-ingress.github.io/auth-url, were applying the configuration to just one of the paths pointing the service. So, considering domain.local/path1 and domain.local/path2 pointing to svc1, an annotation added to svc1 would only be applied to one of the paths.
  • Known operating system vulnerabilities were not being fixed or updated during the creation of the controller container image.

Other notable changes include:

  • Andrej Baran made load-server-state to work on HAProxy deployed as an external container.

Dependencies:

  • Embedded HAProxy version was updated from 2.2.24 to 2.2.28.
  • Go updated from 1.14.15 to 1.17.13.
  • Client-go updated from v0.19.16 to v0.21.14.

Fixes and improvements (r15)

New features and improvements since v0.12.14:

  • Add apk upgrade on container building #941 (jcmoraisjr)
  • Enable Load Server State feature for external haproxy #957 (andrejbaran)
  • Fix path scoped annotation on service resources #984 (jcmoraisjr)
  • update embedded haproxy from 2.2.24 to 2.2.28 7ae609a (Joao Morais)
  • update go from 1.14.15 to 1.17.13 and dependencies 2554d7f (Joao Morais)

v0.12.14

Reference (r14)

  • Release date: 2022-07-03
  • Helm chart: --version 0.12.14
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.14
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.14
  • Embedded HAProxy version: 2.2.24
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.14

Release notes (r14)

This release fixes the following issues:

  • A possible typecast failure reported by monkeymorgan was fixed, which could happen on outages of the apiserver and some resources are removed from the api before the controller starts to watch the api again.
  • The external HAProxy now starts without a readiness endpoint configured. This avoids adding a just deployed controller as available before it has been properly configured. Starting liveness was raised in the helm chart, so that huge environments have time enough to start.

Dependencies:

  • Embedded HAProxy version was updated from 2.2.22 to 2.2.24.

Fixes and improvements (r14)

  • Check type assertion on all informers #934 (jcmoraisjr)
  • Remove readiness endpoint from starting config #937 (jcmoraisjr)
  • update embedded haproxy from 2.2.22 to 2.2.24 281abab (Joao Morais)

v0.12.13

Reference (r13)

  • Release date: 2022-03-26
  • Helm chart: --version 0.12.13
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.13
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.13
  • Embedded HAProxy version: 2.2.22
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.13

Release notes (r13)

This release fixes the match of the Prefix path type when the host is not declared (default host) and the pattern is a single slash. The configured service was not being selected if the incoming path doesn't finish with a slash.

Other notable changes include:

  • Add compatibility with HAProxy 2.5 deployed as external/sidecar. Version 2.5 changed the lay out of the show proc command of the master API.
  • Embedded HAProxy version was updated from 2.2.20 to 2.2.22.

Fixes and improvements (r13)

  • Add haproxy 2.5 support for external haproxy #905 (jcmoraisjr)
  • Fix match of prefix pathtype if using default host #908 (jcmoraisjr)
  • Remove initial whitespaces from haproxy template #910 (ironashram)
  • update embedded haproxy from 2.2.20 to 2.2.22 7270300 (Joao Morais)

v0.12.12

Reference (r12)

  • Release date: 2022-01-22
  • Helm chart: --version 0.12.12
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.12
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.12
  • Embedded HAProxy version: 2.2.20
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.12

Release notes (r12)

This release fixes backend configuration snippets with blank lines. Such blank lines were being rejected due to a wrong parsing of a missing --disable-config-keywords command-line option.

Besides that, a few other improvements were made:

  • All var() sample fetch now have the -m str match method. This fixes compatibility with HAProxy 2.5, which now enforces a match method when using var(). This however isn't enough to use HAProxy 2.5 as an external HAProxy due to incompatibility changes made in the master socket responses, hence the update in the supported HAProxy versions. A future HAProxy Ingress release will make v0.12 and v0.13 branches compatible with HAProxy 2.5.
  • Embedded HAProxy was updated from 2.2.19 to 2.2.20.

Fixes and improvements (r12)

  • Add disableKeywords only if defined #876 (jcmoraisjr)
  • Add match method on all var() sample fetch method #879 (jcmoraisjr)
  • update embedded haproxy from 2.2.19 to 2.2.20 72dabd4 (Joao Morais)

v0.12.11

Reference (r11)

  • Release date: 2021-12-25
  • Helm chart: --version 0.12.11
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.11
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.11
  • Embedded HAProxy version: 2.2.19
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.11

Release notes (r11)

This release fixes an error message if the controller doesn't have permission to update a secret. The update is needed when the embedded acme signer is used. Before this update, a missing permission would fail the update of the secret without notifying the failure in the logs.

Also, the embedded HAProxy version was updated to 2.2.19, and client-go was updated to v0.19.16.

Fixes and improvements (r11)

Fixes and improvements since v0.12.10:

  • Fix error message on secret/cm update failure #863 (jcmoraisjr)
  • update embedded haproxy from 2.2.17 to 2.2.19 a4aa3f6 (Joao Morais)
  • update client-go from v0.19.14 to v0.19.16 8d19d40 (Joao Morais)

v0.12.10

Reference (r10)

  • Release date: 2021-09-16
  • Helm chart: --version 0.12.10
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.10
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.10
  • Embedded HAProxy version: 2.2.17
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.10

Release notes (r10)

This release fixes a regression introduced in #820: a globally configured config-backend snippet wasn't being applied in the final configuration. Annotation based snippets weren't impacted.

Fixes and improvements (r10)

Fixes and improvements since v0.12.9:

  • Fix global config-backend snippet config #856 (jcmoraisjr)

v0.12.9

Reference (r9)

  • Release date: 2021-09-08
  • Helm chart: --version 0.12.9
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.9
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.9
  • Embedded HAProxy version: 2.2.17

Release notes (r9)

This release updates the embedded HAProxy version from 2.2.16 to 2.2.17, which fixes a HAProxy's vulnerability with the Content-Length HTTP header. CVE-2021-40346 was assigned. The following announce from the HAProxy's mailing list has the details and possible workaround: https://www.mail-archive.com/haproxy@formilux.org/msg41114.html

Some controller issues were fixed as well:

  • A misconfigured oauth (e.g. a missing service name) was allowing requests to reach the backend instead of deny the requests.
  • An ingress resource configuration could not be applied if an ingress resource starts to reference a service that was already being referenced by another ingress;

Fixes and improvements (r9)

Fixes and improvements since v0.12.8:

  • always deny requests if oauth is misconfigured (#843) c075258 (Joao Morais)
  • fix ingress update to an existing backend 8119212 (Joao Morais)
  • update embedded haproxy from 2.2.16 to 2.2.17 ac9ccf0 (Joao Morais)
  • update client-go from v0.19.13 to v0.19.14 6dd9de1 (Joao Morais)

v0.12.8

Reference (r8)

  • Release date: 2021-08-17
  • Helm chart: --version 0.12.8
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.8
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.8
  • Embedded HAProxy version: 2.2.16

Release notes (r8)

This release updates the embedded HAProxy version from 2.2.15 to 2.2.16, which fixes some HAProxy's HTTP/2 vulnerabilities. A malicious request can abuse the H2 :method pseudo-header to forge malformed HTTP/1 requests, which can be accepted by some vulnerable backend servers. The following announce from the HAProxy's mailing list has the details: https://www.mail-archive.com/haproxy@formilux.org/msg41041.html

Fixes and improvements (r8)

Fixes and improvements since v0.12.7:

  • update embedded haproxy from 2.2.15 to 2.2.16 dd07840 (Joao Morais)

v0.12.7

Reference (r7)

  • Release date: 2021-08-10
  • Helm chart: --version 0.12.7
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.7
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.7
  • Embedded HAProxy version: 2.2.15

Release notes (r7)

This release fixes a failure in the synchronization between the in memory HAProxy model and the state of the running HAProxy instance. The internal model reflects how HAProxy should be configured based on ingress resources. The states can be out of sync when new empty slots are added to backends that wasn't in edit state, and only affects sharded backends (--backend-shards > 0).

The embedded HAProxy version was updated from 2.2.14 to 2.2.15.

Fixes and improvements (r7)

Fixes and improvements since v0.12.6:

  • Fix change notification of backend shard #835 (jcmoraisjr)
  • update embedded haproxy from 2.2.14 to 2.2.15 ab0566b (Joao Morais)
  • update client-go from v0.19.12 to v0.19.13 c94936c (Joao Morais)

v0.12.6

Reference (r6)

  • Release date: 2021-07-11
  • Helm chart: --version 0.12.6
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.6
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.6
  • Embedded HAProxy version: 2.2.14

Release notes (r6)

This release improves the synchronization between HAProxy state and the in memory model that reflects that state. The controller used to trust that a state change sent to the admin socket is properly applied. Now every HAProxy response is parsed and the controller will enforce a reload if it doesn’t recognize the change as a valid one.

Some new security options were added as well: --disable-external-name can be used to not allow backend server discovery using an external domain, and --disable-config-keywords can be used to partially or completely disable configuration snippets via ingress or service annotations.

A warning will be emitted if the configured global ConfigMap does not exist. This used to be ignored, and v0.12 will only log this misconfiguration to preserve backward compatibility.

Paul improved the command-line documentation, adding some undocumented options that the controller supports.

Fixes and improvements (r6)

Fixes and improvements since v0.12.5:

  • Ensure that configured global ConfigMap exists #804 (jcmoraisjr)
  • Reload haproxy if a backend server cannot be found #810 (jcmoraisjr)
  • Add disable-external-name command-line option #816 (jcmoraisjr) - doc
    • Command-line options:
      • --disable-external-name
  • docs: Add all command-line options to list. #806 (toothbrush)
  • Add disable-config-keywords command-line options #820 (jcmoraisjr) - doc
    • Command-line options:
      • --disable-config-keywords
  • docs: update haproxy doc link to 2.2 986d754 (Joao Morais)
  • build: remove travis-ci configs 0d134de (Joao Morais)
  • update client-go from 0.19.11 to 0.19.12 aee8cd2 (Joao Morais)

v0.12.5

Reference (r5)

  • Release date: 2021-06-20
  • Helm chart: --version 0.12.5
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.5
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.5
  • Embedded HAProxy version: 2.2.14
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.5

Fixes and improvements (r5)

Fixes and improvements since v0.12.4:

  • Fix backend match if no ingress use host match #802 (jcmoraisjr)

v0.12.4

Reference (r4)

  • Release date: 2021-06-17
  • Helm chart: --version 0.12.4
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.4
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.4
  • Embedded HAProxy version: 2.2.14
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.4

Fixes and improvements (r4)

Fixes and improvements since v0.12.3:

  • Fix reading of needFullSync status #772 (jcmoraisjr)
  • Fix per path filter of default host rules #777 (jcmoraisjr)
  • Add option to disable API server warnings #789 (jcmoraisjr) - doc
    • Command-line options:
      • --disable-api-warnings
  • Fix domain validation on secure backend keys #791 (jcmoraisjr)
  • Add ssl-always-add-https config key #793 (jcmoraisjr) - doc
    • Configuration keys:
      • ssl-always-add-https
  • Use the port name on DNS resolver template #796 (jcmoraisjr)
  • Fix reading of tls secret without crt or key #799 (jcmoraisjr)
  • update embedded haproxy from 2.2.13 to 2.2.14 aa0a234 (Joao Morais)
  • update client-go from 0.19.0 to 0.19.11 b0b30c8 (Joao Morais)

Other

  • build: move from travis to github actions 1e137dc (Joao Morais)

v0.12.3

Reference (r3)

  • Release date: 2021-04-16
  • Helm chart: --version 0.12.3
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.3
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.3
  • Embedded HAProxy version: 2.2.13
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.3

Fixes and improvements (r3)

Fixes and improvements since v0.12.2:

  • Fix default host if configured as ssl-passthrough #764 (jcmoraisjr)
  • Update embedded haproxy from 2.2.11 to 2.2.13 7394764 (Joao Morais)

v0.12.2

Reference (r2)

  • Release date: 2021-03-27
  • Helm chart: --version 0.12.2
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.2
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.2
  • Embedded HAProxy version: 2.2.11
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.2

Fixes and improvements (r2)

Fixes and improvements since v0.12.1:

  • Fix incorrect reload if endpoint list grows #746 (jcmoraisjr)
  • Fix prefix path type if the path matches a domain #756 (jcmoraisjr)
  • Update go from 1.14.(latest) to 1.14.15 0ad978d (Joao Morais)
  • Update embedded haproxy from 2.2.9 to 2.2.11 and fixes CVE-2021-3450 (OpenSSL). 9d12c69 (Joao Morais)

v0.12.1

Reference (r1)

  • Release date: 2021-02-28
  • Helm chart: --version 0.12.1
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12.1
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12.1
  • Embedded HAProxy version: 2.2.9
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12.1

Fixes and improvements (r1)

Fixes and improvements since v0.12:

  • Improve crt validation with ssl_c_verify #743 (jcmoraisjr)
  • Remove unix socket before start acme server #740 (jcmoraisjr)
  • Read the whole input when the response fills the buffer #739 (jcmoraisjr)
  • Fix initial weight configuration #742 (jcmoraisjr)

v0.12

Reference (r0)

  • Release date: 2021-02-19
  • Helm chart: --version 0.12.0
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12
  • Embedded HAProxy version: 2.2.9
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12

Fixes and improvements (r0)

Fixes and improvements since v0.12-beta.2:

  • Add support for native redirection of default backend #731 (rikatz) - doc
    • Configuration keys:
      • default-backend-redirect
      • default-backend-redirect-code
  • Fix shrinking of prioritized paths #736 (jcmoraisjr)
  • Update haproxy from 2.2.8 to 2.2.9 a84aaa8 (Joao Morais)

v0.12-beta.2

Reference (b2)

  • Release date: 2021-02-02
  • Helm chart: --version 0.12.0-beta.2 --devel
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12-beta.2
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12-beta.2
  • Embedded HAProxy version: 2.2.8
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12-beta.2

Fixes and improvements (b2)

Fixes and improvements since v0.12-beta.1

  • Use field converter to remove port from hdr host #729 (jcmoraisjr)
  • Add sni and verifyhost to secure connections #730 (jcmoraisjr) - doc
    • Configuration keys:
      • secure-sni
      • secure-verify-hostname
  • Fix path precedence of distinct match types #728 (jcmoraisjr)

v0.12-beta.1

Reference (b1)

  • Release date: 2021-01-17
  • Helm chart: --version 0.12.0-beta.1 --devel
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12-beta.1
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12-beta.1
  • Embedded HAProxy version: 2.2.8
  • GitHub release: https://github.com/jcmoraisjr/haproxy-ingress/releases/tag/v0.12-beta.1

Improvements (b1)

New features and improvements since v0.12-snapshot.3:

  • Readd haproxy user in the docker image #718 (jcmoraisjr)
  • Create state file only if load-server-state is enabled #721 (jcmoraisjr)
  • Add deny access list and exception ip/cidr #722 (jcmoraisjr) - doc
    • Configuration keys:
      • allowlist-source-range
      • denylist-source-range
  • Update embedded haproxy from 2.2.6 to 2.2.8 ba3f80b (Joao Morais)

Fixes (b1)

  • Fix reload failure if admin socket refuses connection #719 (jcmoraisjr)
  • Clear the crt expire gauge when full sync #717 (jcmoraisjr)
  • Fix first conciliation if external haproxy is not running #720 (jcmoraisjr)

Docs

  • Fix prometheus config #723 (jcmoraisjr)

v0.12-snapshot.3

Reference (s3)

  • Release date: 2020-12-13
  • Helm chart: --version 0.12.0-snapshot.3 --devel
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12-snapshot.3
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12-snapshot.3
  • Embedded HAProxy version: 2.2.6

Improvements (s3)

New features and improvements since v0.12-snapshot.2:

  • Add SameSite cookie attribute #707 (jcmoraisjr) - doc
    • Configuration keys:
      • session-cookie-same-site
  • Independently configure rules and TLS #702 (jcmoraisjr)
  • Change oauth2 to path scope #704 (jcmoraisjr) - doc
  • Update haproxy from 2.2.5 to 2.2.6 b34edd0 (Joao Morais)

Fixes (s3)

  • Use default certificate only if provided SNI isn't found #700 (jcmoraisjr)
  • Only notifies ConfigMap updates if data changes #703 (jcmoraisjr)

Docs

  • Add path scope #705 (jcmoraisjr)

v0.12-snapshot.2

Reference (s2)

  • Release date: 2020-11-18
  • Helm chart: --version 0.12.0-snapshot.2 --devel
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12-snapshot.2
  • Embedded HAProxy version: 2.2.5

Improvements (s2)

New features and improvements since v0.12-snapshot.1:

  • Update go from 1.14.8 to 1.14.(latest) 3c8b444 (Joao Morais)
  • Add worker-max-reloads config option #692 (jcmoraisjr)
    • Configuration keys:
      • worker-max-reloads - doc
  • Update haproxy from 2.2.4 to 2.2.5 ac87843 (Joao Morais)
  • Add ingress class support #694 (jcmoraisjr)
    • Configuration keys:
      • Class matter, Strategies and Scope sections of the Configuration keys doc
    • Command-line options:
      • --controller-class - doc
      • --watch-ingress-without-class - doc

Fixes (s2)

  • Fix line too long on backend parsing #683 (jcmoraisjr)
  • Fix basic auth backend tracking #688 (jcmoraisjr)
  • Allow signer to work with wildcard dns certs #695 (pbabilas)
  • Improve certificate validation of acme signer #689 (jcmoraisjr)

v0.12-snapshot.1

Reference (s1)

  • Release date: 2020-10-20
  • Helm chart: --version 0.12.0-snapshot.1 --devel
  • Image (Quay): quay.io/jcmoraisjr/haproxy-ingress:v0.12-snapshot.1
  • Image (Docker Hub): jcmoraisjr/haproxy-ingress:v0.12-snapshot.1
  • Embedded HAProxy version: 2.2.4

Improvements (s1)

New features and improvements since v0.11-beta.1:

  • Update to go1.14.8 #659 (jcmoraisjr)
  • Update to client-go v0.19.0 #660 (jcmoraisjr)
  • Update to haproxy 2.2.3 #661 (jcmoraisjr)
  • Add path-type-order global config #662 (jcmoraisjr) - doc
    • Configuration keys:
      • path-type-order
  • Add better handling for cookie affinity with preserve option #667 (griever989) - doc
    • Configuration keys:
      • session-cookie-preserve
      • session-cookie-value-strategy
  • Add abstract per path config reader #663 (jcmoraisjr)
  • Add option to run an external haproxy instance #666 (jcmoraisjr)
    • Configuration keys:
      • external-has-lua - doc
      • groupname - doc
      • master-exit-on-failure - doc
      • username - doc
    • Command-line options:
      • --master-socket - doc
  • Convert ssl-redirect to the new per path config #670 (jcmoraisjr)
  • Add --sort-endpoints-by command-line option #678 (jcmoraisjr)
    • Configuration keys:
      • --sort-endpoints-by - doc
  • Update embedded haproxy to 2.2.4 4ff2f55 (Joao Morais)
  • Configure default backend to not change backend ID #681 (jcmoraisjr)

Fixes (s1)

  • Fix rewrite target match #668 (jcmoraisjr)
  • Log socket response only if message is not empty #675 (jcmoraisjr)
  • Improve old and new backend comparison #676 (jcmoraisjr)
  • Implement sort-backends #677 (jcmoraisjr)
  • Fix dynamic update of the default backend #680 (jcmoraisjr)

Other

  • Adds a GH Action to close stale issues #615 (rikatz)