kubernetes-ingress

kubernetes-ingress copied to clipboard

Haproxy does not handle Services of the type ExternalName

18

Hi, when creating a service of the type "ExternalName" and an ingress pointing towards it, then the ingress controller keeps repeating: ``` 2019/10/15 10:30:23 controller.go:194: Endpoint for service does not...

martivo

Creation of Ingress resource with ssl-passthrough=true causes TLS configuration to be lost

2

# Description When an Ingress resource is created that has annotation `ingress.kubernetes.io/ssl-passthrough: "true"`, this causes the configured TLS key needed to terminate HTTPS connections for all non-ssl-passthrough resources to be...

adriansuarez

Backend Servers not created/updated since v.1.7.11

20

Hi, since the 1.7.11 update (happens with 1.8.0 as well) we experience the following issue (K8s version 1.22): If an ingress is configured with a path type exact rule, the...

dschuldt

## Introduction I am experimenting with the "haproxy.org/route-acl" annotation for services to get pure websocket-traffic into a pod. While doing this and trying out many different settings and overwriting different...

EmielBruijntjes

Recent Kubernetes versions no longer offer version `networking.k8s.io/v1beta1` for `Ingress` objects. Update documentation to use `networking.k8s.io/v1` instead. Signed-off-by: Ruben Laban

tun0

CVE-2022-29526: Incorrect Privilege Assignment vulnerability in Go dependency

4

[Trivy](https://github.com/aquasecurity/trivy) scans for both `haproxytech/kubernetes-ingress:1.8.4` and `haproxytech/kubernetes-ingress:1.8.3` images return the CVE-2022-29526 vulnerability which affects the `golang.org/x/sys` dependency in its `v0.0.0-20220227234510-4e6760a101f9` version. The report states that the vulnerability has been fixed...

monrax

When using a global CRD, every state change triggers a hard restart on HAProxy (even a simple pod scale): ```text 2022/08/03 16:20:49 DEBUG global.go:81 Global config updated: [TuneOptions: != models.GlobalTuneOptions]...

fabianonunes

BUG/MINOR: don't add cookie to server if dynamic cookie enabled

2

the annotation `haproxy.org/cookie-persistence` is supposed to enable dynamic cookies for the backend, but i've found that it is still returning static cookies. I tested with 1.7.9 and 1.8.0 and see...

cspargo

Feature request: additional backends e.g. for haproxy spoa

3

We are currently using haproxy ingress controller in combination with cloudflare zero-trust. Cloudflare Zero trust handles the access control for you and the traffic for authorized users gets forwards to...

dani-CO-CN

A rollout restart, or scale down of haproxy causes 503 connection timeout errors

11

I'm using helm to run HaProxy ingress with autoscaling enabled (chart version 1.21.1). Whenever an HaProxy pod terminates (because of a scale down event, or a rollout restart), I start...

pnmatich