What would be the best way to alter the base haproxy.cfg?

[dpgeekzero]

To be more specific, I'm running the ingress with hostNetwork: true as my cluster is deployed on bare metal.

I'd like to lock down the stats/metrics port to only internal cluster IP's.

I was thinking that I could create my own base config and use a startup script to copy my config in over the base one, or spin my own image.

It would be great if that kind of config data could be pulled from the configmap as well.

[oktalz]

Hi, changing IP address of stats via configmap seems like a good idea.

while waiting that option to be added, currently you can change haproxy.cfg, specifically bind *:1024 line and build docker image manually.