Enterprise
Changelog
On this page
The changelog shows you an in-depth list of changes included in HAProxy Kubernetes Ingress Controller.
Version 3.0
Release 3.0.0-ee1 - 2025-01-21 Jump to heading
- BUILD/MINOR EE update client native to most recent version
- EE MAJOR set version 3.0 as latest active version
- TEST/MINOR fix some unit tests and e2e tests random failures
- MEDIUM ci add k8s 1.32 to tests
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- MEDIUM techdump enhancements. Write maps files on disk prior to dump add a dump log file
- MEDIUM improved performance for startup and servers management
- BUG/MAJOR EE s6 downgrade s6 to 3.1.6.2 version
- BUG/MAJOR EE replace curl with wget due to errors with arm version
- BUILD/MINOR EE go.mod update k8s.io packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- EE TEST add k8s 1.31 to ci
- EE MAJOR upgrade s6 overlay to 3.2.0.2
- EE MAJOR use HAPEE 3.0 version
- MEDIUM new annotation cookie-persistence-no-dynamic
- DOC doc for initial-sync-period
- MINOR initial sync period flag sets the first transaction sync period
- BUG provide certificates handler for default local service
- MINOR add support to binary statically compiled
- MINOR add --disable-writing-only-if-reload Ingress Controller start argument
- MEDIUM update certificates through runtime
- DOC/MINOR EE add HAPEE versions to lifecycle documentation
- EE MEDIUM modsec optimization if the same modsec is defined at Configmap level and Ingress level
- MINOR switch to s6 reload if socket reload fails
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update k8s.io packages
- EE MEDIUM improve performance on modsecurity ruleSet files writing and redesign
- MEDIUM Enable jemalloc allocator preload for HAPEE
- BUG/MINOR fs wait until all files are written prior to transaction commit
- EE MEDIUM maps parallelize writing of maps to haproxy and fs
- CLEANUP/MINOR ci linter does not need retry anymore
- DOC/MAJOR EE lifecycle add lifecycle information about active versions
- DOC/MAJOR lifecycle add lifecycle information about active versions
- MINOR commit use new version of commit check on github
- MEDIUM use unix socket when mixing ssl passthrough and offloading
- BUG remove unnecessary store argument for ingress
- MEDIUM remove restart of HAProxy
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update k8s.io packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- TEST/MINOR fix usage of testify NoError
- CLEANUP/MINOR EE move proxy tests to scheduled only mode
- BUILD/MINOR check update commit check tool
- BUG use Start call in restart command
- EE MINOR in external mode fix WafDir
- MEDIUM add transformer functions to all K8s events
- BUG/MEDIUM reload wait until reload is done
- BUILD/MEDIUM EE linter add sequential running of linters
- BUILD/MEDIUM linter add sequential running of linters
- BUILD/MINOR EE go.mod update client-native-ee package
- BUILD/MINOR go.mod update client-native package
- BUILD/MINOR go.mod update k8s api packages
- BUILD/MEDIUM EE go increase Go version to 1.23
- BUILD/MEDIUM go increase Go version to 1.23
- TEST/MEDIUM fix flaky ingressClass test
- MEDIUM add ingress.class annotation to TCP CR
- MINOR add some words to commit spelling checks
- MEDIUM add children in TCP CR Frontend
- MINOR fix DeepCopy Backend CRD
- MINOR rename with _test test files
- EE MEDIUM add info to eventChan data
- MINOR support thread pin on stats
- CLEANUP/MINOR clean go releaser arch types
- BUG/MINOR go clean version info from dirty message
- BUILD/MINOR ci add spell check to commit messages to check mistakes
- OPTIM/MAJOR go Optimize struct field alignments
- BUILD EE update go dependencies
- BUG/MINOR EE slog when using slog keep writing messages also on stdout
- CLEANUP/MINOR EE standardize slog types
- MEDIUM add missing ingress.v1.haproxy.com/org in haproxy-ingress.hapee.yaml
- BUILD/MINOR add nano to image
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update k8s.io packages
- MINOR support thread pin on frontend/status
- BUG Handle more Cgroups v1/v2 memory limit caveats
- DOC/MINOR change version_min from 1.4 to 1.11 for timeout-server and description for configmap since 1.4
- BUG update pod-serving port to match default
- EE MAJOR maps add diff for maps to slog
- CLEANUP/MINOR EE docker remove warnings on build
- BUG use Run to restart a HAProxy process without zombie
- MINOR slog add extra info about fetch time to log message
- BUG/MINOR EE maps add name of the map to slog
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update k8s.io packages
- BUG dont repeat error messages for the same service in the same ingress
- BUG dont repeat secrets error messages for TCP
- BUG dont repeat secrets error messages
- TEST test HTTP Requests Backend CRD
- TEST test ACLs Backend CRD
- MINOR add acls and http requests in backend CRD
- BUG dont process empty secret name in ingress
- EE MINOR add process metrics to slog output
- EE MINOR slog add extra info about map refresh
- EE MINOR slog add extra info about fetch data
- DOC/MINOR In TCP CR doc explain that the mode is forced to tcp
- BUG remove modsecurity filter in frontend when backend has already the same one
- BUG fix for modsecurity service e2e test
- BUG remove too restrictive regex for modsecurity secret parsing
- DOC/MINOR update active version in doc.yaml
- MINOR add slog for reload manager
- MINOR enhance TCP CRD documentation for Secret usage
- MINOR enhance TCP CRD documentation for Secret usage
- MEDIUM update TCP CRD documentation and detect collisions accross all namespaces
- MEDIUM update TCP CRD documentation and detect collisions accross all namespaces
- BUG/MINOR do not reload if transaction failed
- BUILD/MEDIUM EE update linter to 1.59.1 version
- BUILD/MEDIUM update linter to 1.59.1 version
- MAJOR remove support for alpha1 crds
- EE MAJOR haproxy use HAProxy 3.0
- DOC/MINOR crds add job-check-crd flag
- DOC/MINOR sync-period clarify helm usage
- BUILD/MINOR ci upgrade github actions
- BUG/MINOR do not reload if transaction failed
- EE MINOR crd simplify tcp-ee definition
- BUILD/MEDIUM update linter to 1.59.1 version
- MAJOR remove support for alpha1 crds
- MAJOR haproxy use HAProxy 3.0
- DOC/MINOR crds add job-check-crd flag
- DOC/MINOR sync-period clarify helm usage
- BUILD/MINOR ci upgrade github actions
- MINOR crd simplify tcp definition
- MINOR crd simplify tcp definition
- MEDIUM add TCP CRD to configure TCP services
- MINOR change behaviour for default backend for TCP service annotation in ConfigMap
- MEDIUM add TCP CRD to configure TCP services
- MINOR change behaviour for default backend for TCP service annotation in ConfigMap
- MEDIUM Fix s6 IC finish script to handle non-fatal exit
- BUILD/MAJOR k8s resolve weird errors with k8s tooling
- BUG SslDefaultDhParam should get default value if needed
- MINOR add field names when printing struc
- MINOR fix info message when global config is updated
- MEDIUM Fix s6 IC finish script to handle non-fatal exit
- EE MINOR fetch add debug message about how many items were fetched
- EE MINOR fetch auto adjust fetch limits
- EE MINOR logs change attribute that indicates standard log message
- BUILD/MINOR ci in case of failure retry linter check
- BUILD/MAJOR k8s resolve weird errors with k8s tooling
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update golang.org/x packages
- BUG/MAJOR EE slog do not disable logs if you are not using experimental slog
- BUG SslDefaultDhParam should get default value if needed
- MINOR uniform local peer management
- BUG manage modification in name and contents for modsecurity
- MINOR add field names when printing struc
- MINOR fix info message when global config is updated
- MINOR uniform local peer management
- EE TEST/MINOR lint add auto retry to lint test
- EE MINOR in extra slog mode write all standard log messages to slog logger
- BUG fixes various regressions for aggregator and modsecurity
- Controller DOC EE Ingress add documentation for modes sync the informers fetch and proxy
- BUG be able to watch ingress.v1.haproxy.org if the CRD is created after Ingress Controller start up
- DOC EE update documentation for CRD to use ingress.v1.haproxy.com instead of core.haproxy.org
- BUILD/MINOR EE fetch add proxy-k8s-fetch-size to allow setting number of simultaneous items fetched
- EE TEST/MEDIUM use k8s 1.30 as main version
- TEST/MEDIUM use k8s 1.30 as main version
- BUG/MINOR Prevents improper overriding of `DefaultServer` when processing the `proto` annotation
- BUG/MINOR fix incorrect old DefaultBackend name in Reload log
- BUG/MINOR fix incorrect old DefaultBackend name in Reload log
- EE MEDIUM fetch use map instead of list to allow faster getting of data
- CLEANUP/MINOR EE fetch optimize variable initialization
- CLEANUP/MINOR EE fetch simply the logic in fetch mode
- BUG/MINOR EE fetch allow sleep between checks if you are leader
- BUG/MINOR EE proxy save last state in cache for endpoint slices
- EE MAJOR proxy activate passive mode on proxy
- TEST/MEDIUM use k8s 1.30 as main version
- BUG/MAJOR EE fetch reset continue flag for each iteration
- EE TEST/MINOR ci if connection is nil return error instead of panic
- BUILD/MINOR EE ci decrease times for fetching data
- BUG/MINOR EE fetch check if we need to stop in all cases
- EE MINOR fetch use cache in fetch from proxy mode
- CLEANUP/MINOR EE remove unnecessary equal method
- BUG/MINOR fix nil pointer in refreshCerts
- BUG/MINOR fix nil pointer in refreshCerts
- EE MINOR in fetch mode remove log refering to server mode
- EE MINOR fix Makefile for example-dev-fetch and example-dev-proxy
- EE MINOR logs add debug message about hash of map changing
- BUILD/MEDIUM EE ci add jobs to test proxy mode
- EE MAJOR add proxy client for most k8s resources
- BUG/MINOR EE do not use leader election in external mode
- EE REORG/MEDIUM proxy setup proxy server with all basic fetch resources
- EE REORG/MEDIUM fetch move fetchers to fetch package
- EE MEDIUM fetch create global cache for k8s fetch mode
- MINOR split files for CR informers and events
- MINOR split files for CR informers and events
- TEST/MINOR fix teardown removing tcp configmap not called for EndpointsSuite
- TEST/MINOR fix teardown removing tcp configmap not called for EndpointsSuite
- EE MINOR Rename proxy flag k8s-api-sync-type values
- EE TEST add Makefile targets to be able to deploy in FETCH and PROXY mode.
- BUG EE fix Fetch mode flags
- BUG EE fix dump time that was always set to Epoch in dump
- BUG avoid writing incomplete maps files and store hash only in case of success
- BUG/MINOR Prevents improper overriding of `DefaultServer` when processing the `proto` annotation
- EE MINOR leaderelection fix proxy client
- REORG/MINOR move k8s types to separate package
- REORG/MINOR move k8s types to separate package
- EE REORG/MINOR unite settings used in fetch functions
- BUG/MINOR EE fetch reduce number of requests for non namespace resources
- EE MEDIUM add leader election to server proxy mode
- BUG/MAJOR deploy respect change of default port to 8080 and 8443
- BUG/MINOR doc fix https-bind-port and ssl-redirect-port
- BUG/MAJOR deploy respect change of default port to 8080 and 8443
- BUG/MINOR doc fix https-bind-port and ssl-redirect-port
- EE MINOR fetch ensure that the resources are fetched gradually
- EE MINOR experimental add k8s-fetch-mode-period feature
- EE MAJOR add new mode for k8s API sync
- EE MINOR add extra slog for map refresh
- BUG avoid writing incomplete maps files and store hash only in case of success
- EE MINOR extra slog create the log directory if it does not exists
- EE MEDIUM add extra slog logging
- EE MINOR Proxy add a metrics for the number of failed API requests
- EE MINOR Add Prometheus Metrics for Proxy mode
- CLEANUP/MINOR EE proxy eliminate the need for extra port
- MINOR refactor experimental flags
- MINOR more resilient getEndpointsFromAggregator when changes in Aggregator Svc
- BUG fix crash on UPDATE events when old item is nil
- BUG fix crash on UPDATE events when old item is nil
- EE MEDIUM add experimental mode for fetching endpoint slices data
- CLEANUP/MINOR doc remove links to old blog posts
- BUG/MINOR doc correct availability for annotations allow and deny lists
- CLEANUP/MINOR doc remove links to old blog posts
- BUG/MINOR doc correct availability for annotations allow and deny lists
- BUG keep ssl and ssl-passthrough active together
- BUG/MINOR EE avoid writing log messages if cache is not used
- BUG/MINOR EE job resolve panic when correct CRDs is installed
- BUILD/MINOR EE go.mod update k8s.io packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUG keep ssl and ssl-passthrough active together
- BUG fix log message origin
- TEST/MINOR allow 2048 pods per node on Kind
- TEST/MINOR allow 2048 pods per node on Kind
- BUG/MINOR runtime use correct check when calculating max byte size
- BUG/MINOR use go 1.22 for UBI images
- BUG/MINOR runtime use correct check when calculating max byte size
- DOC/MEDIUM add prometheus metrics doc
- DOC/MEDIUM add prometheus metrics doc
- MEDIUM add metrics for reloadrestartruntime
- BUG fix the watch deployment RBAC for techdump
- BUG techdump last dump time only after serialization
- MEDIUM add metrics for reloadrestartruntime
- BUG techdump should handle auxiliary configuration directory
- MINOR add defer for dump creation to ensure cleaning
- DOC deployment annotation for service
- CLEANUP/MINOR runtime unite bufSize used in maps and runtime communication
- MINOR runtime update whole backend at once
- BUG/MINOR prevents unconditional reloads when prometheus is enabled
- BUG/MINOR prevents unnecessary reloads due to CRD defaults.name
- CLEANUP/MINOR runtime unite bufSize used in maps and runtime communication
- MINOR runtime update whole backend at once
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update k8s.io packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update golang.org/x packages
- BUG/MINOR prevents unconditional reloads when prometheus is enabled
- BUG/MINOR prevents unnecessary reloads due to CRD defaults.name
- DOC fix the socket name for techdump
- MINOR add deployment annotation for service to indicate their deployment target
- MEDIUM amend server slots management to reserve at least required number
- BUILD/MINOR update go version to 1.22
- MEDIUM amend server slots management to reserve at least required number
- BUG/MEDIUM crd fix checking of existing CRD definitions in k8s
- CLEANUP/MINOR test correct spellcheck error
- MINOR add aditional logging on informers
- DOC/MAJOR set latest ingress controller version to v1.11
- BUG/MEDIUM crd fix checking of existing CRD definitions in k8s
- CLEANUP/MINOR test correct spellcheck error
- MINOR add aditional logging on informers
- MEDIUM Upgrade s6 overlay to v3 (3.1.6.2)
- DOC/MAJOR set latest ingress controller version to v1.11
- BUILD/MINOR update versions of haproxy go packages
- BUILD/MINOR ci increase timeout for golangci-lint
- BUILD/MINOR update go version to 1.22
- BUILD/MINOR go update client-native and config parser libraries
- BUILD/MAJOR remove support for linux/386 images
- MINOR add scheme support in HTTP(S) redirects
- MEDIUM runtime be more resilient when starting controller
- BUILD/MINOR update client-native library
- CLEANUP/MINOR ci reconfigure gitlab scheduled rules
- BUG/MINOR crd do not convert if zero value is set for value
- BUILD/MAJOR remove support for linux/386 images
- MINOR add scheme support in HTTP(S) redirects
- TEST make mapupdate test resilient to starting number of maps entries
- DOC prometheus access outside pod
- MINOR prometheus access outside pod
- MEDIUM runtime be more resilient when starting controller
- BUILD/MINOR update client-native library
- CLEANUP/MINOR ci reconfigure gitlab scheduled rules
- MINOR add quic-bind-port command line parameter
- EE MINOR add quic-bind-port command line parameter
- BUG EE fix typo in quic-announce-port command line parameter
- DOC fix typo in quic-announce-port command line parameter
- BUG fix typo in quic-announce-port command line parameter
- DOC documentation for quic protocol
- MINOR add quic support
- DOC EE documentation for quic protocol
- MINOR add quic support
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update golang.org/x packages
- BUG/MINOR crd do not convert if zero value is set for value
- MAJOR change http and https default ports to 8080 and 8443
- MEDIUM Upgrade s6 overlay to v3 (3.1.6.2)
- BUG/MINOR EE build use same rules on ubi image
- BUG/MINOR build if tag does not exist use dev as tag
- BUG/MEDIUM display correct version of ingress controller in logs
- BUILD/MAJOR test add 1.29 k8s version
- BUG/MINOR build if tag does not exist use dev as tag
- EE MINOR add experimental flag to enable a set of experimental features
- EE MINOR add distributed cache for configuation restoration
- BUG/MEDIUM display correct version of ingress controller in logs
- BUILD/MAJOR test add 1.29 k8s version
- CLEANUP EE tests align tests for ee CN
- CLEANUP/MINOR crd clean crs documentation
- BUILD/MINOR EE update client native and config parser
- BUILD/MINOR update client native and config parser
- BUILD/MINOR EE update client-go to v0.29.1
- BUILD/MINOR update client-go to v0.29.1
- MINOR add reload in gateway
- MINOR use copy instead of loops in CRD converters
- BUG manage TuneOptions and SSL default dh param
- TEST make mapupdate test resilient to starting number of maps entries
- DOC prometheus outside pod access
- MINOR prometheus outside pod access
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update golang.org/x packages
- CLEANUP/MINOR crd clean crs documentation
- BUILD/MINOR update client native and config parser
- BUILD/MINOR update client-go to v0.29.1
- EE MINOR add PointerIfNotDefault function
- MINOR add PointerIfNotDefault function
- DOC enhance techdump documentation
- MINOR add flag disable modules
- BUG wrong caller for straight not formatted log message
- BUG wrong techdump socket command name in doc
- BUG fix listner missing on CR if CRDs added after controller startup
- MINOR add reload in gateway
- BUG remove unnecessary reload from handleDefaultService
- MINOR use copy instead of loops in CRD converters
- BUG manage TuneOptions and SSL default dh param
- BUG fix listner missing on CR if CRDs added after controller startup
- TEST add e2e tests for Global CR
- TEST add e2e tests for Global CR
- CLEANUP/MINOR ci remove deprecated gitlab token usage
- CLEANUP/MINOR ci remove deprecated gitlab token usage
- BUG remove unnecessary reload from handleDefaultService
- MINOR reformat log messages to include correct path in output
- MAJOR crd add v1 crd and deprecate alpha2 add EE CRDs
- MINOR fix controller-gen version to v0.13.0
- MINOR 6060 as default controller port fix pprof missing in maps add e2e tests
- BUILD order api pkgs for code-generator consistency
- BUILD order api pkgs for code-generator consistency
- MINOR 6060 as default controller port fix pprof missing in maps add e2e tests
- BUG/MINOR fix panic in Global CR DeepCopy
- BUG/MINOR fix panic in Global CR DeppCopy for v1
- MAJOR crd add v1 crd and deprecate alpha2
- BUG/MINOR fix panic in Global CR DeepCopy
- BUG recovers global and frontend config snippets after a faulty transaction
- BUG EE reenabling publish service and publish-ip annotation
- BUG recovers global and frontend config snippets after a faulty transaction
- BUG EE fix doc production by adding ee contents
- EE MINOR add techdump secured HTTP endpoint
- TEST make access control e2e tests more robust
- TEST make access control e2e tests more robust
- BUG fix cluster ip from publish service
- BUG fix cluster ip from publish service
- CLEANUP/MINOR EE use local echo image
- CLEANUP/MINOR EE clean reload messages for modsec
- BUG/MINOR EE tests apply secret before running test
- BUILD/MAJOR EE increase HAPEE version to 2.8
- BUG EE add missing RBAC permissions in haproxy-ingress.hapee.yaml
- BUG EE fix ingress deployment
- DOC/MINOR change version_min from 1.4 to 1.9 for timeout-server and description for configmap since 1.4
- EE MINOR add techdump facility
- DOC documentation of new added prometheus metrics
- BUG fix configmap and default backend service data for prometheus report
- EE MINOR build docker image from a locally built kubernetes-ingress binary
- MINOR various logger amendments
- BUG/MINOR logs do not add brackets to logs that do not have any labels
- BUILD/MINOR update commit commit check tool
- BUILD/MINOR ci increase timeout for golang linters
- MAJOR crd add job for custom resource definition handling
- MINOR move version.go to package version
- MINOR align permissions needed for techdump for consistency
- MINOR add reload/restart configuration manager
- DOC document incompatibilty between route-acl annotation and multiple matches path in Ingress
- MINOR ensure both ClusterIP and ExternalIPs are added in publish service
- BUG propagate the Ingress Controller LB external address to all ingresses
- BUG/MINOR revert changes in EventPublishService done in commit f39d5c81cb19c75483c5f9e131e5bec1958f8ba8
- BUG/MINOR fix logic for detecting updates on namespace events
- BUG/MINOR EE test resolve conflicts with community testing
- EE MINOR add prometheus metrics for configsnippet and configuration synchronization
- EE MINOR add warning in error messages for possible temporary situations
- EE MINOR s6 starts with main cfg file only
- CLEANUP/MINOR EE lint align code to go version 1.21
- BUG EE fixes modsec e2e
- BUG EE update peers even when previous configuration failed
- EE TEST resolve ee differences for UseBackendSuite
- DOC EE add publish-ip documentation
- EE MINOR add global publish-ip annotation to set the ingress status loadbalancer ip address
- EE MINOR init create empty map files so they can be referenced in aux file
- EE REORG/MINOR golint and styling changes
- BUG/MINOR EE aligning to AWS MP entitlement name
- BUG/MINOR EE required region for AWS MP integration
- BUG/MINOR EE wrong AWS MP product ID
- BUG/MINOR EE preserve reloads for snippets
- BUILD/MINOR EE Add RHEL UBI EE Docker image
- BUILD/MINOR EE lint use new linter that does not have issue with Go 1.20
- EE TEST modsec use newest v1 ingress
- EE TEST/MINOR map-updates add more info to log message
- EE TEST/MINOR ci use most recent k8s
- EE TEST/MINOR add hardstop 1s
- EE lint annotation remove unused logger
- BUG/MINOR EE write modsec rules
- EE MINOR fix equal method comparison
- BUILD EE style fix linter errors
- BUILD/MINOR EE support for docker build tags
- EE TEST/MINOR testing AWS LicenseManager business logic
- EE MINOR AWS License Manager integration
- EE MAJOR add configuration file option
- BUG EE purge systematically backend and secrets processed
- EE update go dependencies
- BUG EE deletion of modsecurity filter when secret does not exist
- BUG EE permits to change modsecurity for a service
- EE MINOR modify filter modsecurity identifier naming to accomodate parsing rule.
- EE TEST add modsecurity service tests
- EE MINOR add service modsecurity annotation support
- EE TEST add modsec with mapfiles e2e tests
- EE MINOR peers resolve difference between CE and EE
- EE MINOR add peers management
- EE MAJOR add support for WAF
- BUG/MINOR logs do not add brackets to logs that do not have any labels
- BUILD/MINOR update commit commit check tool
- BUILD/MINOR ci increase timeout for golang linters
- MAJOR crd add job for custom resource definition handling
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update golang.org/x packages
- MINOR move version.go to package version
- MINOR align permissions needed for techdump for consistency
- MINOR various logger amendments
- MINOR add reload/restart configuration manager
- DOC document incompatibilty between route-acl annotation and multiple matches path in Ingress
- MINOR ensure both ClusterIP and ExternalIPs are added in publish service
- BUG propagate the Ingress Controller LB external address to all ingresses
- BUG/MINOR revert changes in EventPublishService done in commit f39d5c81cb19c75483c5f9e131e5bec1958f8ba8
- BUG/MINOR fix logic for detecting updates on namespace events
- EE MINOR add init EE modules option
- BUILD EE update go mod and sum
- BUILD/MAJOR EE use hapee as base for controller
- DOC/MINOR EE update readme and ee log info
- DOC/MINOR EE enable generating ee docs
- BUILD EE ci allow EE commits add credentials for hapee registry
Version 1.11
Release 1.11.10-ee2 - 2025-01-08 Jump to heading
- BUG/MINOR EE fix server alignment during restart of controller
- BUILD/MINOR EE go.mod update golang.org/x packages
Release 1.11.10-ee1 - 2024-12-20 Jump to heading
- EE MINOR restart during restart of IC align runtime state when reload is skipped
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- MEDIUM techdump enhancements. Write maps files on disk prior to dump add a dump log file
- MEDIUM improved performance for startup and servers management
Release 1.11.9-ee4 - 2024-11-29 Jump to heading
- EE MAJOR add option to reload controller without reloading HAProxy
Release 1.11.9-ee3 - 2024-11-22 Jump to heading
- MEDIUM new annotation cookie-persistence-no-dynamic
- DOC doc for initial-sync-period
- MINOR initial sync period flag sets the first transaction sync period
- MINOR add support to binary statically compiled
- BUG provide certificates handler for default local service
- MINOR add --disable-writing-only-if-reload Ingress Controller start argument
- EE MEDIUM modsec optimization if the same modsec is defined at Configmap level and Ingress level
- MINOR switch to s6 reload if socket reload fails
Release 1.11.9-ee2 - 2024-10-30 Jump to heading
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- EE MEDIUM improve performance on modsecurity ruleSet files writing and redesign
Release 1.11.9-ee1 - 2024-10-29 Jump to heading
- MEDIUM Enable jemalloc allocator preload for HAPEE
- BUILD/MINOR check update commit check tool
- CLEANUP/MINOR EE move proxy tests to scheduled only mode
- BUG/MINOR fs wait until all files are written prior to transaction commit
- EE MEDIUM maps parallelize writing of maps to haproxy and fs
- MEDIUM use unix socket when mixing ssl passthrough and offloading
- BUG remove unnecessary store argument for ingress
- MEDIUM remove restart of HAProxy
- TEST/MINOR fix usage of testify NoError
Release 1.11.8-ee2 - 2024-10-08 Jump to heading
- BUG use Start call in restart command
- EE MINOR in external mode fix WafDir
- MINOR rename with _test test files
- MEDIUM add transformer functions to all K8s events
Release 1.11.8-ee1 - 2024-10-03 Jump to heading
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUG/MEDIUM reload wait until reload is done
- BUILD/MEDIUM EE go increase Go version to 1.23
- BUILD/MEDIUM go increase Go version to 1.23
- BUILD/MEDIUM linter add sequential running of linters
- TEST/MEDIUM fix flaky ingressClass test
- EE MEDIUM add info to eventChan data
Release 1.11.6-ee8 - 2024-09-04 Jump to heading
- BUG/MINOR EE go clean version info from dirty message
- MINOR support thread pin on stats
- BUG/MINOR go clean version info from dirty message
- BUILD/MINOR ci add spell check to commit messages to check mistakes
Release 1.11.6-ee7 - 2024-08-14 Jump to heading
- BUG fix switch to different modsecurity secret
Release 1.11.6-ee6 - 2024-08-14 Jump to heading
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD EE update go dependencies
- BUG/MINOR EE slog when using slog keep writing messages also on stdout
- CLEANUP/MINOR EE standardize slog types
- MEDIUM add missing ingress.v1.haproxy.com/org in haproxy-ingress.hapee.yaml
Release 1.11.6-ee5 - 2024-08-05 Jump to heading
- BUILD/MINOR add nano to image
- MINOR slog add extra info about fetch time to log message
Release 1.11.6-ee4 - 2024-07-31 Jump to heading
- EE MAJOR maps add diff for maps to slog
- BUG Handle more Cgroups v1/v2 memory limit caveats
- DOC/MINOR change version_min from 1.4 to 1.11 for timeout-server and description for configmap since 1.4
- BUG use Run to restart a HAProxy process without zombie
Release 1.11.6-ee3 - 2024-07-11 Jump to heading
- BUG/MINOR EE maps add name of the map to slog
Release 1.11.6-ee2 - 2024-07-11 Jump to heading
- BUILD/MINOR EE go.mod update k8s.io packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUG dont repeat error messages for the same service in the same ingress
- BUG dont process empty secret name in ingress
Release 1.11.6-ee1 - 2024-07-03 Jump to heading
- EE MINOR add process metrics to slog output
- EE MINOR slog add extra info about map refresh
- EE MINOR slog add extra info about fetch data
- BUG/MINOR do not reload if transaction failed
- BUILD/MEDIUM EE update linter to 1.59.1 version
- BUILD/MEDIUM update linter to 1.59.1 version
- TEST test HTTP Requests Backend CRD
- TEST test ACLs Backend CRD
- MINOR add acls and http requests in backend CRD
- BUG dont repeat secrets error messages for all hosts in the same ingress
- BUG remove modsecurity filter in frontend when backend has already the same one
- BUG fix for modsecurity service e2e test
- BUG remove too restrictive regex for modsecurity secret parsing
- MINOR add slog for reload manager
Release 1.11.5-ee4 - 2024-06-07 Jump to heading
- MEDIUM Fix s6 IC finish script to handle non-fatal exit
- BUILD/MAJOR k8s resolve weird errors with k8s tooling
- BUG SslDefaultDhParam should get default value if needed
- MINOR add field names when printing struc
- MINOR fix info message when global config is updated
- EE MINOR fetch add debug message about how many items were fetched
- EE MINOR fetch auto adjust fetch limits
Release 1.11.5-ee3 - 2024-06-05 Jump to heading
- EE MINOR logs change attribute that indicates standard log message
- MINOR add gopath in code-generator.sh
Release 1.11.5-ee2 - 2024-06-03 Jump to heading
- BUG/MAJOR EE slog do not disable logs if you are not using experimental slog
- BUG manage modification in name and contents for modsecurity
Release 1.11.5-ee1 - 2024-05-28 Jump to heading
- MINOR uniform local peer management
- EE TEST/MINOR lint add auto retry to lint test
- EE MINOR in extra slog mode write all standard log messages to slog logger
- BUG fixes various regressions for aggregator and modsecurity
- Controller DOC EE Ingress add documentation for modes sync the informers fetch and proxy
- DOC EE update documentation for CRD to use ingress.v1.haproxy.com instead of core.haproxy.org
- BUILD/MINOR EE fetch add proxy-k8s-fetch-size to allow setting number of simultaneous items fetched
- EE TEST/MEDIUM use k8s 1.30 as main version
- TEST/MEDIUM use k8s 1.30 as main version
- BUG/MINOR Prevents improper overriding of `DefaultServer` when processing the `proto` annotation
- BUG/MINOR fix incorrect old DefaultBackend name in Reload log
- EE MEDIUM fetch use map instead of list to allow faster getting of data
- CLEANUP/MINOR EE fetch optimize variable initialization
- CLEANUP/MINOR EE fetch simply the logic in fetch mode
- BUG/MINOR EE fetch allow sleep between checks if you are leader
- BUG/MINOR EE proxy save last state in cache for endpoint slices
- EE MAJOR proxy activate passive mode on proxy
- BUG/MAJOR EE fetch reset continue flag for each iteration
- EE TEST/MINOR ci if connection is nil return error instead of panic
- BUILD/MINOR EE ci decrease times for fetching data
- BUG/MINOR EE fetch check if we need to stop in all cases
- EE MINOR fetch use cache in fetch from proxy mode
- CLEANUP/MINOR EE remove unnecessary equal method
- EE MINOR in fetch mode remove log refering to server mode
- EE MINOR fix Makefile for example-dev-fetch and example-dev-proxy
- BUILD/MEDIUM EE ci add jobs to test proxy mode
- BUG/MINOR fix nil pointer in refreshCerts
- EE MINOR logs add debug message about hash of map changing
- EE MAJOR add proxy client for most k8s resources
- BUG/MINOR EE do not use leader election in external mode
- EE REORG/MEDIUM proxy setup proxy server with all basic fetch resources
- EE REORG/MEDIUM fetch move fetchers to fetch package
- EE MEDIUM fetch create global cache for k8s fetch mode
- MINOR split files for CR informers and events
- TEST/MINOR fix teardown removing tcp configmap not called for EndpointsSuite
- EE MINOR Rename proxy flag k8s-api-sync-type values
- EE TEST add Makefile targets to be able to deploy in FETCH and PROXY mode.
- BUG EE fix Fetch mode flags
- EE MINOR leaderelection fix proxy client
- REORG/MINOR move k8s types to separate package
- EE REORG/MINOR unite settings used in fetch functions
- BUG/MINOR EE fetch reduce number of requests for non namespace resources
- EE MEDIUM add leader election to server proxy mode
- BUG/MAJOR deploy respect change of default port to 8080 and 8443
- BUG/MINOR doc fix https-bind-port and ssl-redirect-port
- EE MINOR fetch ensure that the resources are fetched gradually
- BUG EE fix dump time that was always set to Epoch in dump
Release 1.11.3-ee4 - 2024-04-26 Jump to heading
- EE MINOR experimental add k8s-fetch-mode-period feature
- EE MAJOR add new mode for k8s API sync
- EE MINOR add extra slog for map refresh
- BUG avoid writing incomplete maps files and store hash only in case of success
- EE MINOR extra slog create the log directory if it does not exists
- EE MEDIUM add extra slog logging
- EE MINOR Proxy add a metrics for the number of failed API requests
- EE MINOR Add Prometheus Metrics for Proxy mode
- CLEANUP/MINOR EE proxy eliminate the need for extra port
- MINOR refactor experimental flags
- MINOR more resilient getEndpointsFromAggregator when changes in Aggregator Svc
- BUG/MINOR EE avoid writing log messages if cache is not used
Release 1.11.3-ee3 - 2024-04-17 Jump to heading
- BUG fix crash on UPDATE events when old item is nil
Release 1.11.3-ee2 - 2024-04-15 Jump to heading
- EE MEDIUM add experimental mode for fetching endpoint slices data
- CLEANUP/MINOR doc remove links to old blog posts
- BUG/MINOR doc correct availability for annotations allow and deny lists
- BUG/MINOR EE job resolve panic when correct CRDs is installed
- BUG keep ssl and ssl-passthrough active together
Release 1.11.3-ee1 - 2024-04-04 Jump to heading
- TEST/MINOR allow 2048 pods per node on Kind
- BUG/MINOR runtime use correct check when calculating max byte size
- BUG/MINOR use go 1.22 for UBI images
- DOC/MEDIUM add prometheus metrics doc
- MEDIUM add metrics for reloadrestartruntime
- BUG fix the watch deployment RBAC for techdump
- BUG techdump last dump time only after serialization
- BUG techdump should handle auxiliary configuration directory
- MINOR add defer for dump creation to ensure cleaning
- DOC deployment annotation for service
Release 1.11.2-ee1 - 2024-03-22 Jump to heading
- CLEANUP/MINOR runtime unite bufSize used in maps and runtime communication
- MINOR runtime update whole backend at once
- BUG/MINOR prevents unconditional reloads when prometheus is enabled
- BUG/MINOR prevents unnecessary reloads due to CRD defaults.name
- DOC fix the socket name for techdump
- MINOR add deployment annotation for service to indicate their deployment target
- MEDIUM amend server slots management to reserve at least required number
- BUILD/MINOR update go version to 1.22
Release 1.11.0-ee1 - 2024-03-15 Jump to heading
- BUG/MEDIUM crd fix checking of existing CRD definitions in k8s
- CLEANUP/MINOR test correct spellcheck error
- MINOR add aditional logging on informers
- DOC/MAJOR set latest ingress controller version to v1.11
- MEDIUM Upgrade s6 overlay to v3 (3.1.6.2)
- DOC/MAJOR set latest ingress controller version to v1.11
- BUILD/MINOR update versions of haproxy go packages
- BUILD/MINOR ci increase timeout for golangci-lint
- BUILD/MINOR update go version to 1.22
- BUILD/MINOR go update client-native and config parser libraries
- BUILD/MAJOR remove support for linux/386 images
- MINOR add scheme support in HTTP(S) redirects
- MEDIUM runtime be more resilient when starting controller
- BUILD/MINOR update client-native library
- CLEANUP/MINOR ci reconfigure gitlab scheduled rules
- BUG/MINOR crd do not convert if zero value is set for value
- BUILD/MAJOR remove support for linux/386 images
- MINOR add scheme support in HTTP(S) redirects
- TEST make mapupdate test resilient to starting number of maps entries
- DOC prometheus access outside pod
- MINOR prometheus access outside pod
- MEDIUM runtime be more resilient when starting controller
- BUILD/MINOR update client-native library
- CLEANUP/MINOR ci reconfigure gitlab scheduled rules
- MINOR add quic-bind-port command line parameter
- EE MINOR add quic-bind-port command line parameter
- BUG EE fix typo in quic-announce-port command line parameter
- DOC fix typo in quic-announce-port command line parameter
- BUG fix typo in quic-announce-port command line parameter
- DOC documentation for quic protocol
- MINOR add quic support
- DOC EE documentation for quic protocol
- MINOR add quic support
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update golang.org/x packages
- BUG/MINOR crd do not convert if zero value is set for value
- MAJOR change http and https default ports to 8080 and 8443
- MEDIUM Upgrade s6 overlay to v3 (3.1.6.2)
- BUG/MINOR EE build use same rules on ubi image
- BUG/MINOR build if tag does not exist use dev as tag
- BUG/MEDIUM display correct version of ingress controller in logs
- BUILD/MAJOR test add 1.29 k8s version
- BUG/MINOR build if tag does not exist use dev as tag
- EE MINOR add experimental flag to enable a set of experimental features
- EE MINOR add distributed cache for configuation restoration
- BUG/MEDIUM display correct version of ingress controller in logs
- BUILD/MAJOR test add 1.29 k8s version
- CLEANUP EE tests align tests for ee CN
- CLEANUP/MINOR crd clean crs documentation
- BUILD/MINOR EE update client native and config parser
- BUILD/MINOR update client native and config parser
- BUILD/MINOR EE update client-go to v0.29.1
- BUILD/MINOR update client-go to v0.29.1
- MINOR add reload in gateway
- MINOR use copy instead of loops in CRD converters
- BUG manage TuneOptions and SSL default dh param
- TEST make mapupdate test resilient to starting number of maps entries
- DOC prometheus outside pod access
- MINOR prometheus outside pod access
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update golang.org/x packages
- CLEANUP/MINOR crd clean crs documentation
- BUILD/MINOR update client native and config parser
- BUILD/MINOR update client-go to v0.29.1
- EE MINOR add PointerIfNotDefault function
- MINOR add PointerIfNotDefault function
- DOC enhance techdump documentation
- MINOR add flag disable modules
- BUG wrong caller for straight not formatted log message
- BUG wrong techdump socket command name in doc
- BUG fix listner missing on CR if CRDs added after controller startup
- MINOR add reload in gateway
- BUG remove unnecessary reload from handleDefaultService
- MINOR use copy instead of loops in CRD converters
- BUG manage TuneOptions and SSL default dh param
- BUG fix listner missing on CR if CRDs added after controller startup
- TEST add e2e tests for Global CR
- TEST add e2e tests for Global CR
- CLEANUP/MINOR ci remove deprecated gitlab token usage
- CLEANUP/MINOR ci remove deprecated gitlab token usage
- BUG remove unnecessary reload from handleDefaultService
- MINOR reformat log messages to include correct path in output
- MAJOR crd add v1 crd and deprecate alpha2 add EE CRDs
- MINOR fix controller-gen version to v0.13.0
- MINOR 6060 as default controller port fix pprof missing in maps add e2e tests
- BUILD order api pkgs for code-generator consistency
- BUILD order api pkgs for code-generator consistency
- MINOR 6060 as default controller port fix pprof missing in maps add e2e tests
- BUG/MINOR fix panic in Global CR DeepCopy
- BUG/MINOR fix panic in Global CR DeppCopy for v1
- MAJOR crd add v1 crd and deprecate alpha2
- BUG/MINOR fix panic in Global CR DeepCopy
- BUG recovers global and frontend config snippets after a faulty transaction
- BUG EE reenabling publish service and publish-ip annotation
- BUG recovers global and frontend config snippets after a faulty transaction
- BUG EE fix doc production by adding ee contents
- EE MINOR add techdump secured HTTP endpoint
- TEST make access control e2e tests more robust
- TEST make access control e2e tests more robust
- BUG fix cluster ip from publish service
- BUG fix cluster ip from publish service
- CLEANUP/MINOR EE use local echo image
- CLEANUP/MINOR EE clean reload messages for modsec
- BUG/MINOR EE tests apply secret before running test
- BUILD/MAJOR EE increase HAPEE version to 2.8
- BUG EE add missing RBAC permissions in haproxy-ingress.hapee.yaml
- BUG EE fix ingress deployment
- DOC/MINOR change version_min from 1.4 to 1.9 for timeout-server and description for configmap since 1.4
- EE MINOR add techdump facility
- DOC documentation of new added prometheus metrics
- BUG fix configmap and default backend service data for prometheus report
- EE MINOR build docker image from a locally built kubernetes-ingress binary
- MINOR various logger amendments
- BUG/MINOR logs do not add brackets to logs that do not have any labels
- BUILD/MINOR update commit commit check tool
- BUILD/MINOR ci increase timeout for golang linters
- MAJOR crd add job for custom resource definition handling
- MINOR move version.go to package version
- MINOR align permissions needed for techdump for consistency
- MINOR add reload/restart configuration manager
- DOC document incompatibilty between route-acl annotation and multiple matches path in Ingress
- MINOR ensure both ClusterIP and ExternalIPs are added in publish service
- BUG propagate the Ingress Controller LB external address to all ingresses
- BUG/MINOR revert changes in EventPublishService done in commit f39d5c81cb19c75483c5f9e131e5bec1958f8ba8
- BUG/MINOR fix logic for detecting updates on namespace events
- BUG/MINOR EE test resolve conflicts with community testing
- EE MINOR add prometheus metrics for configsnippet and configuration synchronization
- EE MINOR add warning in error messages for possible temporary situations
- EE MINOR s6 starts with main cfg file only
- CLEANUP/MINOR EE lint align code to go version 1.21
- BUG EE fixes modsec e2e
- BUG EE update peers even when previous configuration failed
- EE TEST resolve ee differences for UseBackendSuite
- DOC EE add publish-ip documentation
- EE MINOR add global publish-ip annotation to set the ingress status loadbalancer ip address
- EE MINOR init create empty map files so they can be referenced in aux file
- EE REORG/MINOR golint and styling changes
- BUG/MINOR EE aligning to AWS MP entitlement name
- BUG/MINOR EE required region for AWS MP integration
- BUG/MINOR EE wrong AWS MP product ID
- BUG/MINOR EE preserve reloads for snippets
- BUILD/MINOR EE Add RHEL UBI EE Docker image
- BUILD/MINOR EE lint use new linter that does not have issue with Go 1.20
- EE TEST modsec use newest v1 ingress
- EE TEST/MINOR map-updates add more info to log message
- EE TEST/MINOR ci use most recent k8s
- EE TEST/MINOR add hardstop 1s
- EE lint annotation remove unused logger
- BUG/MINOR EE write modsec rules
- EE MINOR fix equal method comparison
- BUILD EE style fix linter errors
- BUILD/MINOR EE support for docker build tags
- EE TEST/MINOR testing AWS LicenseManager business logic
- EE MINOR AWS License Manager integration
- EE MAJOR add configuration file option
- BUG EE purge systematically backend and secrets processed
- EE update go dependencies
- BUG EE deletion of modsecurity filter when secret does not exist
- BUG EE permits to change modsecurity for a service
- EE MINOR modify filter modsecurity identifier naming to accomodate parsing rule.
- EE TEST add modsecurity service tests
- EE MINOR add service modsecurity annotation support
- EE TEST add modsec with mapfiles e2e tests
- EE MINOR peers resolve difference between CE and EE
- EE MINOR add peers management
- EE MAJOR add support for WAF
- BUG/MINOR logs do not add brackets to logs that do not have any labels
- BUILD/MINOR update commit commit check tool
- BUILD/MINOR ci increase timeout for golang linters
- MAJOR crd add job for custom resource definition handling
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update golang.org/x packages
- MINOR move version.go to package version
- MINOR align permissions needed for techdump for consistency
- MINOR various logger amendments
- MINOR add reload/restart configuration manager
- DOC document incompatibilty between route-acl annotation and multiple matches path in Ingress
- MINOR ensure both ClusterIP and ExternalIPs are added in publish service
- BUG propagate the Ingress Controller LB external address to all ingresses
- BUG/MINOR revert changes in EventPublishService done in commit f39d5c81cb19c75483c5f9e131e5bec1958f8ba8
- BUG/MINOR fix logic for detecting updates on namespace events
- EE MINOR add init EE modules option
- BUILD EE update go mod and sum
- BUILD/MAJOR EE use hapee as base for controller
- DOC/MINOR EE update readme and ee log info
- DOC/MINOR EE enable generating ee docs
- BUILD EE ci allow EE commits add credentials for hapee registry
Version 1.10
Release 1.10.15-ee3 - 2024-07-31 Jump to heading
- BUG Handle more Cgroups v1/v2 memory limit caveats
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
Release 1.10.15-ee2 - 2024-07-11 Jump to heading
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
Release 1.10.15-ee1 - 2024-05-23 Jump to heading
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUG/MINOR fix nil pointer in refreshCerts
- BUG EE fix dump time that was always set to Epoch in dump
- BUG avoid writing incomplete maps files and store hash only in case of success
Release 1.10.13-ee4 - 2024-04-17 Jump to heading
- BUG fix crash on UPDATE events when old item is nil
Release 1.10.13-ee3 - 2024-04-11 Jump to heading
- BUILD/MINOR EE go.mod update k8s.io packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUG keep ssl and ssl-passthrough active together
Release 1.10.13-ee2 - 2024-03-30 Jump to heading
- BUG/MINOR runtime use correct check when calculating max byte size
- BUG/MINOR use go 1.22 for UBI images
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update k8s.io packages
- DOC/MEDIUM add prometheus metrics doc
- MEDIUM add metrics for reloadrestartruntime
- BUG fix the watch deployment RBAC for techdump
- BUG techdump last dump time only after serialization
- BUG techdump should handle auxiliary configuration directory
- MINOR add defer for dump creation to ensure cleaning
- DOC deployment annotation for service
Release 1.10.13-ee1 - 2024-03-22 Jump to heading
- CLEANUP/MINOR runtime unite bufSize used in maps and runtime communication
- MINOR runtime update whole backend at once
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update k8s.io packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- DOC fix the socket name for techdump
- MINOR add deployment annotation for service to indicate their deployment target
Release 1.10.11-ee2 - 2024-03-11 Jump to heading
- MEDIUM amend server slots management to reserve at least required number
Release 1.10.11-ee1 - 2024-02-16 Jump to heading
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update k8s.io packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update k8s.io packages
- BUG/MINOR EE build use same rules on ubi image
- BUG/MINOR build if tag does not exist use dev as tag
- BUG/MEDIUM display correct version of ingress controller in logs
- EE MINOR add PointerIfNotDefault function
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update k8s.io packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- DOC enhance techdump documentation
- BUG wrong techdump socket command name in doc
- MINOR add reload/restart configuration manager
- CLEANUP/MINOR ci remove deprecated gitlab token usage
Release 1.10.10-ee1 - 2024-01-15 Jump to heading
- BUILD order api pkgs for code-generator consistency
- MINOR 6060 as default controller port fix pprof missing in maps add e2e tests
- BUG/MINOR fix panic in Global CR DeepCopy
- BUG EE reenabling publish service and publish-ip annotation
- BUG EE fix doc production by adding ee contents
- BUG recovers global and frontend config snippets after a faulty transaction
- EE MINOR add techdump secured HTTP endpoint
- BUG fix cluster ip from publish service
- BUILD/MINOR update commit commit check tool
- BUILD/MINOR ci increase timeout for golang linters
- MAJOR crd add job for custom resource definition handling
- MINOR move version.go to package version
- BUG EE add missing RBAC permissions in haproxy-ingress.hapee.yaml
- BUG EE fix ingress deployment
- DOC/MINOR change version_min from 1.4 to 1.9 for timeout-server and description for configmap since 1.4
- MINOR add annotation on Service and Ingress for timeout server
- EE MINOR add techdump facility
- BUG propagate the Ingress Controller LB external address to all ingresses
- MINOR ensure both ClusterIP and ExternalIPs are added in publish service
- DOC documentation of new added prometheus metrics
- BUG fix configmap and default backend service data for prometheus report
- EE MINOR build docker image from a locally built kubernetes-ingress binary
- BUG/MINOR fix logic for detecting updates on namespace events
- BUG EE killing parent process on AWS license manager error
- BUG EE dynamic regional endpoint for License Manager
- MINOR add prometheus metrics for configsnippet and configuration synchronization
- MINOR add warning in error messages for possible temporary situations
- MINOR s6 starts with main cfg file only
- MINOR add transactionID in all logs
- BUG/MINOR fix k8s resync for all objects except endpoints endpointslices. Endpoint and endpointslices fix is done in a previous commit. With informers resync are sent as Update not Create. We were doing nothing on an Update on a resync. If an event was skipped for any reason we were never resyncing.
- MINOR add k8s logs and fix k8s resync for endpoints and endpointslices
- CLEANUP/MINOR EE lint align code to go version 1.21
- BUILD/MINOR go use Go version 1.21
- BUG/MINOR resolve implicit memory aliasing in for loop.
- BUG/MINOR avoid hard restarts when the number of endpoints reaches zero
- BUG/MINOR prevents clash on custom routes names to avoid unecessary restarts
- BUILD/MINOR ci use docker version 24
- BUG/MEDIUM support alternative healthcheck endpoint
- BUG pprof handler should be run once
- BUG EE fixes modsec e2e
- BUG EE update peers even when previous configuration failed
- EE TEST resolve ee differences for UseBackendSuite
- DOC EE add publish-ip documentation
- EE MINOR add global publish-ip annotation to set the ingress status loadbalancer ip address
- EE MINOR init create empty map files so they can be referenced in aux file
- EE REORG/MINOR golint and styling changes
- BUG/MINOR EE aligning to AWS MP entitlement name
- BUG/MINOR EE required region for AWS MP integration
- BUG/MINOR EE wrong AWS MP product ID
- BUG/MINOR EE preserve reloads for snippets
- BUILD/MINOR EE Add RHEL UBI EE Docker image
- BUILD/MINOR EE lint use new linter that does not have issue with Go 1.20
- EE TEST modsec use newest v1 ingress
- EE TEST/MINOR map-updates add more info to log message
- EE TEST/MINOR ci use most recent k8s
- EE TEST/MINOR add hardstop 1s
- EE lint annotation remove unused logger
- EE TEST/MINOR add context to acl route test
- BUG/MINOR EE write modsec rules
- EE MINOR fix equal method comparison
- BUILD EE style fix linter errors
- BUILD/MINOR EE support for docker build tags
- EE TEST/MINOR testing AWS LicenseManager business logic
- EE MINOR AWS License Manager integration
- EE MAJOR add configuration file option
- BUG EE purge systematically backend and secrets processed
- EE MEDIUM add config snippet validation
- EE disable CE snippet
- BUG EE deletion of modsecurity filter when secret does not exist
- BUG EE permits to change modsecurity for a service
- EE MINOR modify filter modsecurity identifier naming to accomodate parsing rule.
- EE TEST add modsecurity service tests
- EE MINOR add service modsecurity annotation support
- EE TEST add modsec with mapfiles e2e tests
- EE MINOR peers resolve difference between CE and EE
- EE MINOR add peers management
- EE MAJOR add support for WAF
- EE MINOR add init EE modules option
- BUILD EE update go mod and sum
- BUILD/MAJOR EE use hapee as base for controller
- DOC/MINOR EE update readme and ee log info
- DOC/MINOR EE enable generating ee docs
- BUILD EE ci allow EE commits add credentials for hapee registry
- BUG Handle Cgroups v2 memory limit set to 0 or max
- BUILD/MINOR go.mod update golang.org/x packages
- BUG wait for k8s events from default local service
- BUG/MINOR goreleaser fix release note generation. Previously the release notes were edited manually
- OPTIM/MINOR goreleaser dont use deprecated field to generate archive names
- BUG makefile should launch all tests with e2e_parallel and e2e_https tags
- BUG/MINOR rbac Add missing RBAC for customresourcedefinitions
- BUG/MINOR add TuneOptions if is missing
- BUG fix ingressclass reload
- BUG ingress status update with others controllers
- BUG add resources limit to yaml files for deployment and daemonset
- BUG/MINOR quit after printing version when invoked with -v
- BUG/MINOR prevent crash in external mode without external option set
- MINOR keep https when ssl passthrough is removed
- MINOR make docker image sha1 repeatable
- MINOR update client native library
- MINOR update to management of ingress statuses
- MINOR dont need referencegrant if tcproute and backendref are in same namespace
- MINOR update status if ingressclass is accepted after an ingress modification
- MINOR check GW API crd version
- DOC describe every options for each load-balance algorithm
- BUG correct parsing of url_param option for load-balance algorithm
- BUILD/MINOR go.mod update Go packages
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update Go packages
- BUILD/MINOR ci Enable GHCR packages for auto manual and nightly builds
- MINOR prevent running informers from GW API when unnecessary
- MINOR settings for deep comparison to consider nil and empty as the same.
- BUILD/MINOR go.mod update golang.org/x packages
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update golang.org/x packages
- BUILD/MINOR go.mod update github.com/valyala/fasthttp v1.47.0
- BUILD/MINOR go.mod update k8s.io packages
- BUILD/MINOR go.mod update github.com/valyala/fasthttp v1.46.0 github.com/go-openapi/spec v0.20.9
- BUILD/MINOR go.mod update k8s.io packages
- BUG/MINOR ci resolve goreleaser build procedure
Version 1.9
Release 1.9.14-ee4 - 2024-07-11 Jump to heading
- BUILD/MEDIUM update linter to 1.59.1 version
- BUILD/MINOR EE ci update images for docker plus go
- DOC/MINOR update example to use v1 ingress
- BUG EE fixes modsec e2e
- EE TEST modsec use newest v1 ingress
- BUILD/MAJOR EE tests update k8s to most recent versions
- TEST/MAJOR Use networking.k8s.io/v1 instead of v1beta1
- BUILD EE update go version to 1.22
Release 1.9.14-ee3 - 2024-04-18 Jump to heading
- BUG fix crash on UPDATE events when old item is nil
Release 1.9.14-ee2 - 2024-04-11 Jump to heading
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUG keep ssl and ssl-passthrough active together
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- DOC fix the socket name for techdump
Release 1.9.14-ee1 - 2024-02-15 Jump to heading
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- DOC enhance techdump documentation
- BUILD fix gofumpt error
- BUG wrong techdump socket command name in doc
- MINOR add reload/restart configuration manager
- CLEANUP/MINOR ci remove deprecated gitlab token usage
- BUILD order api pkgs for code-generator consistency
Release 1.9.13-ee2 - 2023-12-22 Jump to heading
- BUG/MINOR EE allow some delay on haproxy startup
- BUG/MEDIUM version display correct controller version in logs
- BUG/MINOR EE crd optimize k8s crd events
- EE MINOR crd install both crd versions with crd job
- MINOR 6060 as default controller port fix pprof missing in maps add e2e tests
- BUG/MINOR fix panic in Global CR DeepCopy
- EE MINOR add techdump secured HTTP endpoint
- BUG fix cluster ip from publish service
Release 1.9.13-ee1 - 2023-11-16 Jump to heading
- BUILD/MINOR update commit commit check tool
- BUILD/MINOR ci increase timeout for golang linters
- MAJOR crd add job for custom resource definition handling
- DOC EE add missing example zip referenced in documentation
- BUG EE add missing RBAC permissions in haproxy-ingress.hapee.yaml
- EE MINOR add techdump facility
- DOC/MINOR change version_min from 1.4 to 1.9 for timeout-server and description for configmap since 1.4
- MINOR add annotation on Service and Ingress for timeout server
- BUG propagate the Ingress Controller LB external address to all ingresses
- MINOR ensure both ClusterIP and ExternalIPs are added in publish service
- DOC documentation of new added prometheus metrics
- BUG fix configmap and default backend service data for prometheus report
Release 1.9.12-ee2 - 2023-10-31 Jump to heading
- BUG EE killing parent process on AWS license manager error
- BUG EE dynamic regional endpoint for License Manager
Release 1.9.12-ee1 - 2023-10-12 Jump to heading
- MINOR add transactionID in all logs
- BUILD/MINOR go use Go 1.21 version
- BUG/MINOR avoid hard restarts when the number of endpoints reaches zero
- BUILD/MINOR ci use docker version 24
- BUILD/MEDIUM lint increase golangcilint version to v1.54.1
- BUG/MEDIUM support alternative healthcheck endpoint
- BUG pprof handler should be run once
- BUG/MINOR fix k8s resync for all objects except endpoints endpointslices. Endpoint and endpointslices fix is done in a previous commit. With informers resync are sent as Update not Create. We were doing nothing on an Update on a resync. If an event was skipped for any reason we were never resyncing.
- MINOR add k8s logs and fix k8s resync for endpoints and endpointslices
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- CLEANUP/MINOR EE lint resolve code formatting
- BUG Handle Cgroups v2 memory limit set to 0 or max
- BUG wait for k8s events from default local service
- BUG/MINOR goreleaser fix release note generation. Previously the release notes were edited manually
- OPTIM/MINOR goreleaser dont use deprecated field to generate archive names
- BUG makefile should launch all tests with e2e_parallel and e2e_https tags
- BUG/MINOR rbac Add missing RBAC for customresourcedefinitions
- BUG/MINOR add TuneOptions if is missing
- BUG add resources limit to yaml files for deployment and daemonset
- BUG/MINOR quit after printing version when invoked with -v
- BUG/MINOR prevent crash in external mode without external option set
- MINOR add prometheus metrics for configsnippet and configuration synchronization
- MINOR add warning in error messages for possible temporary situations
- MINOR s6 starts with main cfg file only
- BUG/MINOR aws dynamic credentials provider
- BUG EE fixes modsec e2e
- BUG EE update peers even when previous configuration failed
- BUILD/MINOR EE increase RHEL UBI EE Docker image to 2.6
- EE TEST resolve ee differences for UseBackendSuite
- DOC EE add publish-ip documentation
- EE MINOR add global publish-ip annotation to set the ingress status loadbalancer ip address
- EE MINOR update to management of ingress statuses
- EE MINOR update status if ingressclass is accepted after an ingress modification
- EE MINOR init create empty map files so they can be referenced in aux file
- EE REORG/MINOR golint and styling changes
- BUG/MINOR EE aligning to AWS MP entitlement name
- BUG/MINOR EE required region for AWS MP integration
- BUG/MINOR EE wrong AWS MP product ID
- BUG/MINOR EE preserve reloads for snippets
- BUILD EE ci add more memory to POD
- BUILD/MINOR EE Add RHEL UBI EE Docker image
- BUILD/MINOR EE lint use new linter that does not have issue with Go 1.20
- EE TEST modsec use newest v1 ingress
- EE TEST/MINOR map-updates add more info to log message
- EE TEST/MINOR ci use most recent k8s
- EE TEST/MINOR add hardstop 1s
- EE lint annotation remove unused logger
- EE TEST/MINOR add context to acl route test
- BUG/MINOR EE write modsec rules
- EE MINOR fix equal method comparison
- BUILD EE style fix linter errors
- BUILD/MINOR EE support for docker build tags
- EE TEST/MINOR testing AWS LicenseManager business logic
- EE MINOR AWS License Manager integration
- EE MAJOR add configuration file option
- BUG EE purge systematically backend and secrets processed
- EE MEDIUM add config snippet validation
- EE disable CE snippet
- BUG EE deletion of modsecurity filter when secret does not exist
- BUG EE permits to change modsecurity for a service
- EE MINOR modify filter modsecurity identifier naming to accomodate parsing rule.
- EE TEST add modsecurity service tests
- EE MINOR add service modsecurity annotation support
- EE TEST add modsec with mapfiles e2e tests
- EE MINOR peers resolve difference between CE and EE
- EE MINOR add peers management
- EE MAJOR add support for WAF
- EE MINOR add init EE modules option
- BUILD EE update go mod and sum
- BUILD/MAJOR EE use hapee as base for controller
- DOC/MINOR EE update readme and ee log info
- DOC/MINOR EE enable generating ee docs
- BUILD EE ci allow EE commits add credentials for hapee registry
- BUG correct parsing of url_param option for load-balance algorithm
- BUILD/MINOR go.mod update github.com/prometheus/common v0.44.0
- BUILD/MINOR go.mod update github.com/prometheus/procfs v0.10.0
- MINOR settings for deep comparison to consider nil and empty as the same.
- BUG/MINOR Correct error output message for whitelis/blacklist CIDR
- BUILD/MINOR go.mod update Go packages
- BUILD/MINOR go.mod update golang.org/x packages
- BUILD/MINOR go.mod update golang.org/x packages
- BUILD/MINOR go.mod update github.com/prometheus/client_golang v1.15.1
- BUILD/MINOR go.mod update github.com/valyala/fasthttp v1.47.0
- BUILD/MINOR go.mod update github.com/valyala/fasthttp v1.46.0 github.com/go-openapi/spec v0.20.9
- BUILD/MINOR go.mod update github.com/klauspost/compress v1.16.5
- BUILD/MINOR go.mod update Go packages
- BUILD/MINOR go.mod update golang.org/x packages
- BUG/MEDIUM sec update config parser to v4.0.0
- BUG/MINOR fix config snippet management with default local backend
- BUG/MINOR fix multiple insertion of config snippet from service referenced by several ingresses
- BUG/MINOR use project go version in go release
- BUILD/MINOR security update golang.org/x/net package
- BUG/MINOR fix ingress with same path and different ports
- BUG/MINOR backends should be reprocessed after fixing a failed transaction
- BUILD/MAJOR go increase Go version to 1.20
- BUILD/MINOR lint use new linter that does not have issue with Go 1.20
- CLEANUP/MINOR ci update docker image versions
- BUILD/MAJOR ci apply new linting rules
- BUILD/MEDIUM update linters use local version
- CLEANUP/MINOR remove server state save
- BUG/MINOR fix formating of log message for default backend service
- MINOR docker Additionally tag Docker images with branch
- BUILD/MINOR go use Go version 1.20
- BUILD/MINOR ci raise docker version used in ci
- BUG/MINOR configsnippets from different ingresses pointing to same service
- BUG/MINOR wrong config state file path in external mode
- BUG/MINOR remove unnecessary reloads because of error files.
- BUILD/MINOR update package versions to avoid vulnerabilities
- MINOR Update dep with vulnerabilities
- BUG/MINOR dont set srv.Cookie
- MINOR Automatically set GOMAXPROCS to match pod CPU quotas
Version 1.8
Release 1.8.12-ee8 - 2023-10-31 Jump to heading
- BUG EE killing parent process on AWS license manager error
- BUG EE dynamic regional endpoint for License Manager
Release 1.8.12-ee7 - 2023-10-12 Jump to heading
- MINOR add transactionID in all logs
- BUILD/MINOR EE go.mod update Go packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUG/MINOR fix k8s resync for all objects except endpoints endpointslices. Endpoint and endpointslices fix is done in a previous commit. With informers resync are sent as Update not Create. We were doing nothing on an Update on a resync. If an event was skipped for any reason we were never resyncing.
- MINOR add k8s logs and fix k8s resync for endpoints and endpointslices
Release 1.8.12-ee6 - 2023-09-14 Jump to heading
- BUILD/MAJOR go increase version to 1.21
- BUG Handle Cgroups v2 memory limit set to 0 or max
- BUILD/MINOR EE go.mod update golang.org/x packages
Release 1.8.12-ee5 - 2023-09-03 Jump to heading
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- MINOR add prometheus metrics for configsnippet and configuration synchronization
- MINOR add warning in error messages for possible temporary situations
- MINOR s6 starts with main cfg file only
- BUG EE update peers even when previous configuration failed
Release 1.8.12-ee4 - 2023-06-19 Jump to heading
- DOC EE add publish-ip documentation
- EE MINOR add global publish-ip annotation to set the ingress status loadbalancer ip address
- EE MINOR update to management of ingress statuses
- EE MINOR update status if ingressclass is accepted after an ingress modification
Release 1.8.12-ee3 - 2023-05-18 Jump to heading
- MINOR add reload/restart logs
- BUG/MINOR aws dynamic credentials provider
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUG/MINOR EE ci add only to build stage
Release 1.8.12-ee2 - 2023-05-16 Jump to heading
- EE MINOR init create empty map files so they can be referenced in aux file
Release 1.8.12-ee1 - 2023-03-31 Jump to heading
- EE REORG/MINOR golint and styling changes
- BUG/MINOR EE aligning to AWS MP entitlement name
- BUG/MINOR EE required region for AWS MP integration
- BUG/MINOR EE wrong AWS MP product ID
- BUG/MINOR EE missing error formatting
- BUG/MINOR fix ingress with same path and different ports
- BUILD/MINOR security update golang.org/x/net package
- BUG/MINOR backends should be reprocessed after fixing a failed transaction
- BUILD/MINOR EE lint use new linter that does not have issue with Go 1.20
- BUILD/MINOR lint use new linter that does not have issue with Go 1.20
- CLEANUP/MINOR EE remove server state save
- CLEANUP/MINOR remove server state save
- BUG/MINOR fix formating of log message for default backend service
- BUILD/MINOR EE Add RHEL UBI EE Docker image
Release 1.8.11-ee1 - 2023-02-10 Jump to heading
Release 1.8.8-ee1 - 2023-02-10 Jump to heading
- BUILD/MINOR go use Go version 1.20
- BUILD/MINOR ci raise docker version used in ci
- BUG/MINOR wrong config state file path in external mode
- BUG/MINOR remove unnecessary reloads because of error files.
- BUG/MINOR EE preserve reloads for snippets
- BUG/MINOR dont set srv.Cookie
- BUILD/MEDIUM update linters use local version
- BUILD/MINOR update package versions to avoid vulnerabilities
- MINOR Automatically set GOMAXPROCS to match pod CPU quotas
- BUILD EE ci add more memory to POD
- BUG/MINOR EE write modsec rules
- EE MINOR fix equal method comparison
- BUILD EE style fix linter errors
- BUILD/MINOR EE support for docker build tags
- EE TEST/MINOR testing AWS LicenseManager business logic
- EE MINOR AWS License Manager integration
- EE MAJOR add configuration file option
- BUG EE purge systematically backend and secrets processed
- EE MEDIUM add config snippet validation
- BUG EE deletion of modsecurity filter when secret does not exist
- BUG EE permits to change modsecurity for a service
- EE MINOR modify filter modsecurity identifier naming to accomodate parsing rule.
- EE TEST add modsecurity service tests
- EE MINOR add service modsecurity annotation support
- EE TEST add modsec with mapfiles e2e tests
- EE MINOR add peers management
- EE MAJOR add support for WAF
- EE MINOR add init EE modules option
- BUILD EE update go mod and sum
- BUILD/MAJOR EE use hapee as base for controller
- DOC/MINOR EE update readme and ee log info
- DOC/MINOR EE enable generating ee docs
- BUILD EE ci allow EE commits add credentials for hapee registry
- MINOR removal of unused ingresschan
- BUILD update packages that was reported to have vulnerabilities
- BUG/MINOR properly set default value for queue timeout
- BUG/MAJOR set hard-stop-after with default value of 30m
- MINOR set src-ip-header on default backend
- BUG/MINOR s6 React to SIGUSR1 when pod is getting deleted
- TEST ci extract https tests to separate ci job on github
- BUG/MINOR e2e use correct configmap.yaml file
- BUILD ci speed up ci with parallel start e2e stages
- TEST/MEDIUM Use the builtin HTTP server as default backend
- BUG/MINOR service do not override service status
- BUG/MINOR avoid hard restarts when using a Global CRD
- BUG BackendSwitchingRuleDeleteAll does not delete all rules
- MEDIUM Add Cgroups v1 and v2 limits to MEMLIMIT and GOMEMLIMIT calculation
- MEDIUM Changes for Go 1.19 runtime
- MEDIUM Add GOMEMLIMIT support and switch Go runtime to 1.19
- BUG fix ssl-redirect precedence order with configmap and ingress
- BUG/MINOR Prevent unnecessary reloads when cookie-persistence is enabled
- BUG/MINOR triggers a reload if an Ingress is deleted
- BUG fixes ssl passthrough disable redirect
- BUG fixes error on recreation of default local backend
- MINOR add trace logs for endpoints and servers
- BUG/MINOR prevents unnecessary reloading when the attribute `client-ca` is not used.
- MINOR fixes log message
- BUG/MINOR prevents unecessary restart when using multiple syslog servers
- BUG/MINOR fix segfault because ingressclass API is absent (pre v1.18 k8s)
- BUG/MINOR process multiple backends per service
- BUG/MINOR Add -m to HAProxy arguments to set memory limit to 2/3 of RAM
Version 1.7
Release 1.7.12-ee15 - 2024-12-19 Jump to heading
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- MEDIUM remove restart of HAProxy
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUG use Start call in restart command
- TEST/MEDIUM fix flaky ingressClass test
Release 1.7.12-ee14 - 2024-09-05 Jump to heading
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- EE MINOR write log messages on stdout
Release 1.7.12-ee13 - 2024-09-03 Jump to heading
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
Release 1.7.12-ee12 - 2024-08-14 Jump to heading
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUG fixes unecessary reloads from modsecurity
Release 1.7.12-ee11 - 2024-08-05 Jump to heading
- BUILD/MINOR add nano to image
- BUG/MAJOR EE remove extra refresh handler
- BUG use Run to restart a HAProxy process without zombie
Release 1.7.12-ee10 - 2024-07-10 Jump to heading
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUG dont repeat error messages for the same service in the same ingress
- DOC/MINOR update example to use v1 ingress
- CLEANUP/MINOR EE tests use v1 ingress
- BUG EE fixes modsec e2e
- EE TEST modsec use newest v1 ingress
- BUILD/MAJOR EE tests update k8s to most recent versions
- TEST/MAJOR Use networking.k8s.io/v1 instead of v1beta1
- BUG dont process empty secret name in ingress
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
Release 1.7.12-ee9 - 2024-05-23 Jump to heading
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
Release 1.7.12-ee8 - 2024-04-26 Jump to heading
- EE MINOR use renameio for writing files
- BUILD/MINOR EE use go 1.22 and docker 26
- BUG map files store hash only in case of success
- BUG -t option should change the haproxy binary to /bin/echo
- BUG fix crash on UPDATE events when old item is nil
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
Release 1.7.12-ee7 - 2024-02-15 Jump to heading
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
Release 1.7.12-ee6 - 2024-01-18 Jump to heading
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- MINOR add reload/restart configuration manager
- CLEANUP/MINOR ci remove deprecated gitlab token usage
- BUILD order api pkgs for code-generator consistency
- BUG/MINOR fix panic in Global CR DeepCopy
- MINOR prevents unnecessary reload from backend prometheus management
- MINOR prevents unnecessary reload from backend pprof management
- MINOR add more logs for reload reasons
- TEST upgrade kind version to 1.27.0
- MINOR add transactionID in all logs
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
Release 1.7.12-ee5 - 2023-10-12 Jump to heading
- BUILD/MINOR EE go.mod update go packages
- BUILD/MINOR EE go.mod update golang.org/x packages
- BUILD/MINOR EE go.mod update github.com/aws/aws-sdk-go-v2
Release 1.7.12-ee4 - 2023-10-06 Jump to heading
- MINOR add k8s logs and fix k8s resync for endpoints and endpointslices
- BUG revert fix for cfgdata
- DOC prometheus endpoint documentation
- BUG fix cfgdata status management in config snippet transaction
- MINOR add prometheus metrics for configsnippet and configuration synchronization
- BUILD/MEDIUM add new linter rules
- BUG/MEDIUM informers do not add default namespace multiple times to the list of informers
- BUILD/MEDIUM add new version of linter to the project
Release 1.7.12-ee3 - 2023-08-14 Jump to heading
- EE OPTIM/MINOR improve map updates
- EE MAJOR adjust tests for 1.7 environment
- BUILD/MAJOR EE use Go 1.21 for build
- EE MAJOR add option to dynamically update maps
Release 1.7.12-ee2 - 2023-05-11 Jump to heading
- EE MINOR settings for deep comparison to consider nil and empty as the same
Release 1.7.12-ee1 - 2023-01-24 Jump to heading
Release 1.7.11-ee12 - 2023-01-24 Jump to heading
- BUG/MINOR EE preserve reloads for snippets
Release 1.7.11-ee11 - 2023-01-18 Jump to heading
- EE MEDIUM ci add more memory to IC POD
- MINOR keep ssl and ssl-passthrough active together
- BUG/MINOR config snippet validation more flexible regexp
Release 1.7.11-ee10 - 2022-12-01 Jump to heading
- BUG/MINOR EE handle two formats of error messages in backend configsnippet
- BUG/MINOR EE update frontend and global configsnippet even if no change
Release 1.7.11-ee9 - 2022-11-21 Jump to heading
- BUG/MINOR EE adding goproxy env variables for the gitlab CI
- BUILD/MINOR EE support for docker build tags
- EE TEST/MINOR testing AWS LicenseManager business logic
- EE MINOR AWS License Manager integration
- EE MAJOR add configuration file option
Release 1.7.11-ee8 - 2022-09-12 Jump to heading
- BUG purge systematically backend and secrets processed
- EE MEDIUM add config snippet validation
Release 1.7.11-ee7 - 2022-08-26 Jump to heading
- BUG EE deletion of modsecurity filter when secret does not exist
Release 1.7.11-ee6 - 2022-08-25 Jump to heading
- BUG EE permits to change modsecurity for a service
Release 1.7.11-ee5 - 2022-08-17 Jump to heading
- MINOR modify filter modsecurity identifier naming to accomodate parsing rule.
Release 1.7.11-ee4 - 2022-08-04 Jump to heading
- TEST add modsecurity service tests
- MINOR add service modsecurity annotation support
- MINOR modsec uses map files
- TEST add modsec with mapfiles e2e tests
- MINOR modsec uses map files
Release 1.7.11-ee3 - 2022-06-30 Jump to heading
- MINOR add trace logs for endpoints and servers.
Release 1.7.11-ee2 - 2022-06-17 Jump to heading
- BUG/MINOR process multiple backends per service
Release 1.7.11-ee1 - 2022-06-01 Jump to heading
- BUG commit fixes issues this ip addresses of ingresses updating creation of ingress delayed
Release 1.7.10-ee2 - 2022-04-22 Jump to heading
- TEST add CORS configmap e2e tests
- TEST add CORS e2e tests
- BUG fix removed ACL condition in CORS configuration
- BUG reenable cors-allow-credentials annotation
- BUG fix reloading haproxy when deletion of rules
- MINOR add setting for channels size
- BUG fix ingress status at creation
Release 1.7.10-ee1 - 2022-04-12 Jump to heading
- BUG fix the name of cors-allow-methods annotation
Release 1.7.9-ee1 - 2022-04-12 Jump to heading
- DOC Add initial custom resource documentation
- BUG/MINOR remove backend cfgSnippet state when backend is deleted
- BUG fix missing cors-enable annotation treatment
Release 1.7.7-ee3 - 2022-03-22 Jump to heading
- BUG EE fix for correct equality comparison for PeerEntry model
Release 1.7.7-ee2 - 2022-03-17 Jump to heading
- BUG/MINOR EE remove false errors in modsec annotation
Release 1.7.7-ee1 - 2022-03-16 Jump to heading
- MEDIUM Dont skip any Ingress event
- BUG/MINOR Fix skipped reloads when processing tcp services.
- BUG/MINOR Dont initialize Backend.DefaultServer when not used
- MINOR make scale-server-slots annotation available at all scopes
- BUG/MINOR Dont override default-server params in ExternalName services.
- BUG/MINOR fix frontends management with rules
- MINOR expect any podname format in GetPodPrefix
Release 1.7.6-ee3 - 2022-03-16 Jump to heading
- BUG/MINOR EE modsec Fix conflicting directories
- BUG/MEDIUM EE modsec Fix reload state
Release 1.7.6-ee2 - 2022-03-07 Jump to heading
- EE MINOR modify peers management
- MINOR wait for started process with Run call
Release 1.7.6-ee1 - 2022-03-02 Jump to heading
- BUG/MINOR fixes ingressclass comparison in modification case
- TEST/MINOR Prevent nil pointer dereference.
- MINOR add client-strict-sni annotation
- BUG/MINOR fixes podprefix test in maxconn calculation after names changed with Helm naming adoption.
- MINOR Accept patternfiles in whitelist/blacklists
- BUG/MINOR test haproxy-ingress is in haproxy-controller namespace
- BUG/MINOR sync default backend name with config argument
- BUG/MINOR sync cm name with config argument
Release 1.7.5-ee1 - 2022-01-31 Jump to heading
- BUG/MEDIUM ssl-passthrough Fix default delay value
Release 1.7.4-ee2 - 2022-01-20 Jump to heading
- BUG/MEDIUM EE waf fix out of range index
- DOC/MINOR update cookie-persistence to describe current implementation
Release 1.7.4-ee1 - 2022-01-17 Jump to heading
- BUG/MINOR Fix an incorrect lookup of the Endpoints corresponding to a Service Port
- BUG/MINOR EndpointSlices ignore non ready endpoints
- TEST Add e2e test for non ready endpoints
- MINOR skip default service check if absent
- BUG/MEDIUM do not pull echo image from dockerhub build it locally
- BUG/MEDIUM EE waf fix nil pointer dereference when modsec is used at configmap
Release 1.7.3-ee2 - 2021-12-16 Jump to heading
- EE MINOR add peers management
- BUG/MINOR ingress rule default frontend
- MINOR switch default namespace to haproxy-controller in yaml files
- MINOR sync k8s resources names with Helm project
Release 1.7.3-ee1 - 2021-12-01 Jump to heading
- BUG/MINOR Fix nil pointer dereference in IngressServiceBackend
- TEST/MEDIUM e2e Retry upon connection failures
- TEST add e2e test for proxy-proctol on haproxy side
- TEST Add e2e test for errorfiles and patternfiles
- TEST e2e merge DeployYamlTemplate and DeployYalm methods into Apply
- TEST e2e fix https offload to check the right certificate
- REORG/MINOR split ErrorFiles handler in smaller functions
- BUG/MINOR when ConfigMap is removed corresponding annotations should be deleted
- BUG/MEDIUM Fix inconsistent processing of haproxy files
- BUG/MEDIUM Fix relative path of haproxy files.
- MINOR fix zombie haproxy process in direct control mode
- REORG/MINOR Group informers per resource types
- BUG/MINOR Check for EndpointSlicesMirroring before ignoring Endpoints.
Release 1.7.2-ee1 - 2021-11-12 Jump to heading
- EE MAJOR add support for WAF
- EE MINOR add init EE modules option
- BUILD EE update go mod and sum
- BUILD/MAJOR EE use hapee as base for controller
- DOC/MINOR EE update readme and ee log info
- DOC/MINOR EE enable generating ee docs
- BUILD EE ci allow EE commits add credentials for hapee registry
- BUILD/MINOR ci build nightly images only on original repo
- BUILD/MINOR Enable linters in deploy/test dir
- DOC/MINOR Add goreport badge
- REORG/MINOR reduce complexity in function called supported
- DOC Add Ingress Controller version to main doc page
- BUG/MINOR Fix ingress accepted with ingressClassName set to unexisting ingressclass.
- BUG/MINOR Fix nil pointer dereference in Ingress PathType
- BUG/MINOR Fix configuration of backend model
- DOC Add an IngressClass section
- BUG/MINOR Fix IngressClass filtering
- BUG/MEDIUM Update only status of assigned Ingress resources
- REORG move Ingress handler in a seperate pacakge
- REORG Reorganize service handler in controller/service
- BUG/MINOR restart haproxy when aux config file added
- BUILD/MEDIUM Go update version to Go 1.17
- BUILD/MINOR gitlab update go version in e2e tests
- BUILD/MINOR update client-go library to v0.22.2
- BUILD/MINOR update client-native nad config-parser libraries
- REORG/MINOR move haproxy certs under haproxy/certs
- REORG/MINOR move haproxy rules under haproxy/rules
- REORG/MINOR move haproxy maps to haproxy/maps
- DOC add contributors and license badges
- CR MINOR Remove nullable false from CRDs
- BUG/MINOR Fix backend runtime sync
- BUILD/MINOR rbac Set resources to endpointslices in discovery.k8s.io
- MINOR use undercore instead of hyphen for backend names
Version 1.6
Release 1.6.9-ee1 - 2022-03-03 Jump to heading
- BUG/MINOR Fix an incorrect lookup of the Endpoints corresponding to a Service Port
- BUILD/MINOR ci Improve autodetection of latest branch
- BUILD/MINOR ci Tag 1.7 branch as latest
Release 1.6.8-ee1 - 2021-12-01 Jump to heading
- BUG/MINOR Fix nil pointer dereference in IngressServiceBackend
- BUG/MEDIUM Update only status of assigned Ingress resources
- MINOR Run Global Cfg handler before haproxy startup
- BUG/MINOR process template placeholders in log line
- TEST/MINOR e2e set maxconn value in configmaps
- MAJOR use client-go v0.21.3
- BUILD EE ci allow EE commits add credentials for hapee registry
- BUILD EE prevent pulling kind images from dockerhup use local
Release 1.6.7-ee1 - 2021-09-08 Jump to heading
- MINOR reorg auxiliary config file management
- MINOR add recover in main.go to report silent error
- BUILD/MEDIUM go use Go 1.17
- BUG/MINOR remove unused file from workflow
- Kind TEST update to v0.11.1
- Kind TEST update to v0.11.1
Release 1.6.6-ee1 - 2021-08-19 Jump to heading
- Kind TEST update to v0.11.1
Release 1.6.5-ee2 - 2021-08-04 Jump to heading
- OPTIM/MEDIUM Update Ingress status in a seperate goroutine
Release 1.6.5-ee1 - 2021-07-15 Jump to heading
- MAJOR add option to disable forwarding to ExternalName Services
- BUG/MINOR fix header value handling in request-set-header and response-set-header
- BUG/MINOR fix name inversion with annotation timeout-check
Release 1.6.3-ee1 - 2021-06-16 Jump to heading
- MINOR annotations print annotation name in error logs
- BUG/MINOR tcp service should respect --disable-ipv4/ipv6 flags
- BUG/MINOR synchronize servers when Endpoints ports change
- BUG/MAJOR external mode set all paths
- BUG/MINOR support protocol h1 with backend SSL
- BUG/MINOR remove `cookie` keyword from backend section if the annotation was deleted
- BUILD docker Remove linux/ppc64le target to have parity with HAProxy Alpine images
- BUILD docker Remove GOOS and GOARCH and use dumb-init from distro
- BUG/MINOR bind TCP services on adresses passed via flags --ipv4-bind-address and --ipv6-bind-address
- BUG/MINOR pprof handler should be called in sync loop
- BUG/MINOR external mode copy haproxy.cfg form usr/local/etc/haproxy
- DOC Generalizes the backend-config-snippet example
- BUILD docker Add Github actions for auto and manual multiarch builds for Docker Hub.
- BUILD docker use usr/local/etc/haproxy as base dir
- BUILD/MINOR add go releaser for outside of cluster ingress controller
- DOC proxy-protocol document 0.0.0.0/0 CIDR
- DOC Add doc guide for the secondary haproxy config file
- BUG/MINOR whitelist misconfigured if CM namespace not also whitelisted
- DOC Add IngressClass description
- BUG/MINOR Update config on ConfigMap added event
- BUILD EE update autogenerated files
- BUILD EE update go mod and sum
- BUILD EE ci add credentials so gitlab can login
- EE MAJOR add support for WAF
- EE MINOR add FrontendFilter functions to HAProxyClient
- EE MINOR add init EE modules option
- BUILD/MAJOR EE use hapee as base for controller
- DOC/MINOR EE update readme
- DOC/MINOR EE enable generating ee docs
- BUG/MEDIUM Fix nil pointer dereference in EventEndpoints
- DOC update frontend-config-snippet
Version 1.5
Release 1.5.6-ee1 - 2021-04-29 Jump to heading
- BUG/MEDIUM Fix nil pointer dereference in EventEndpoints
- BUG/MINOR Controller should populate refreshed maps.
- BUG/MINOR Fix incorrect parsing of certificate file name
- BUG/MINOR enable ingress multi configurations for same path and distinct path types
Release 1.5.5-ee1 - 2021-04-21 Jump to heading
- BUILD/MINOR check-commit pin version of image
- BUILD/MINOR check-commit trigger only on pull requests
- BUILD EE Add docker login when building image for e2e tests
- BUILD github-ci adjust fetch-depth
- CLEANUP/MINOR clean with go mod tidy
- MINOR ci update check-commit msg action
- BUG/MINOR Fix address parsing in proxy-protocol annotation
- BUG/MEDIUM certs refresh fix nil pointer dereference
- BUG/MINOR Fix regression when loading multiple cert formats
- BUG/MINOR fix blacklist and proxy protocol duplication
- BUG/MINOR fix whitelist duplication
- TEST/MAJOR e2e update test application and README
- TEST/MINOR e2e test increase tickDuration for rate-limiting
- TEST/MINOR e2e rate-limiting adjust thresholds
- BUG/MINOR fix secret type in default certificate management
- BUG/MINOR rate-limiting preserve counters after reload
- MINOR emit a warning if Main ConfigMap is not found
- MINOR Add debug logs to trace reload related actions
- OPTIM/MINOR decrease log severity of verbose logs from debug to trace
- BUG/MINOR dont reload when the order of map entries change in HAProxy map files.
Release 1.5.3-ee1 - 2021-03-10 Jump to heading
- EE TEST use Dockerfile.hapee
- BUG/MINOR tcp-services add additional input validation to avoid nil pointer dereference
- REORG contract Service to Svc in IngressPath fields
- REORG endpoints getEndpoints() now returns errors instead of logging them
- BUG/MINOR Fix failure in port lookup when servicePort different from containerPort.
- TEST/MINOR port_discovery adjust http port to make test more accurate
- BUILD Fix gitlab-ci linting directive
- BUILD HAPEE Upgrade to 2.3r1
- DOC/MINOR Document building External Ingress Controller
- DOC/MINO Improve tcp-services doc
- BUG/MINOR Fix regression regarding k8s servicePort lookup
- TEST Add e2e test for servicePort discovery
- BUG/MEDIUM sslPassthrough accept tcp rule stops rules processing.
- BUG/MEDIUM incorrect http rules configuration with SSLPassthrough
- TEST https Add more SSLPassthrough tests
- TEST/MEDIUM Seperate sequential and parallel e2e tests
- TEST Cleanup unused code
- TEST Reorg set header test
- TEST Reorg send proxy test
- TEST Reorg rate limiting test
- TEST Reorg ingress match test
- TEST Reorg https tests
- TEST Reorg source ip test
- TEST Reorg basic auth test
- TEST Reorg IngressClass test
- TEST Reorg endpoints-update
- TEST/MAJOR Boilerplate code to reorg e2e tests and use testify/suite
- TEST/MEDIUM Change tests path from deploy/kind/tests to deploy/tests/e2e
- BUG/MINOR healthz listen on IPv6 too
- BUG/MEDIUM frontend stats listen IPv6 if possible
- BUILD/MINOR gitlab-ci update test lint stages
- BUG/MEDIUM drop dynamic map update
- BUG/MEDIUM haproxy rules should be mapped to ingress.Namespace+ingress.Name
- MINOR Make src-ip-header annotation available by Ingress
- BUG/MEDIUM services dont create frontend if corresponding default_backend is not ready
- BUG/MEDIUM servicePort should be resolved before constructing backendName
- MINOR external mode if stock haproxy.cfg not found check in config-dir
- DOC Document External Controller mode
- REORG/MINOR rename OutOfCluster controller arg to External
- MINOR log panic errors in kubernetes.go
- BUILD/MINOR linter Fix maligned check
Release 1.5.1-ee2 - 2021-02-18 Jump to heading
- BUG/MEDIUM EE ONLY drop dynamic map update
- BUG/MEDIUM http rules ineffectual delete operation when refreshing rules
- BUG/MEDIUM file map flush content to disk when refreshing map
- MINOR Add tracing logs in the main reconciliation loop
- BUG/MINOR Dont mix controller logger and k8s client logger
- OPTIM/MEDIUM Dont watch multiple Ingress APIs at the same time
- BUILD gitlab-ci use CI registry via CI_REGISTRY_GO env variable
- BUG/MINOR Delete certificates as soon as tls secrets are deleted
- OPTIM/MINOR Dont process Ingress with DELETED status
Release 1.5.1-ee1 - 2021-02-12 Jump to heading
- BUG/MEDIUM need to reload when failing dynamic map update
- BUILD/MINOR Update Client-Native module
- MINOR controller handle graceful shutdown
- OPTIM/MINOR Enable readiness endpoint after first config sync
- REORG/MINOR use client-native to configure bind lines
- BUG/MINOR Add haproxy txn.base var to stats frontend
- BUG/MINOR fix source map file of acl in proxy protocol
- BUILD/MINOR deploy files fix typo in ingressclasses name
- DOC Set active_version to 1.5
- EE REORG Move initEEModules to seperate file
- EE MINIOR Dont enable EE modules in Test mode
- BUG/MINOR Dont fail if ExternalName Service is not resolving
- BUG/MAJOR clean controller state even when HAProxy sync fails
- DOC Add CORS annotations
- MEDIUM Add CORS support via HAProxy response rules
- Frontend REORG/MINOR annotations reorg handlers
- DOC/MEDIUM Fixed doc formatting
- REORG/MEDIUM haproxy rules handle Ingress ACL at the api client level
- BUG/MEDIUM dont clear ruleIDs buffer when handling ingress rules
- DOC fix typos in --configmap-errorfile argument
- DOC add auth-realm annotation
- MINOR add auth-realm annotation
- MINOR basic-auth ignoring last character \n in password
- MINOR basic-auth keep haproxy auth rule even if auth-secret is not available
- REVERT commit 2ebd7ef4008fb42d251e9fa8627bfe0c17d5079c
- BUILD/MINOR update check-commit action
- DOC/MEDIUM Replaced <pre> tags with Markdown code blocks. Put code keyword backticks around some keywords. Improved grammar in a few descriptions. Changed the auth-secret definition so that the description of the values is under the values key instead of the description key. This makes the table where we show the description only more succinct. For auth-type and auth-secret the example now shows both of these keys together because they are dependant upon one another.
- DOC/MINOR Edit config-snippet description
- DOC recover --configmap-errorfile doc lost in b1d44b902
- BUG/MEDIUM avoid nil pointer dereference in k8s versions < 1.14
- BUG/MINOR avoid nil pointer dereference in basic-auth handling
- DOC add documentation of request-redirect and request-redirect-code annotations
- MINOR Add HTTP redirection with annotation request-redirect
- DOC Add more details about basic-auth
- OPTIM/MINOR basic-auth optimizations
- BUG/MINOR basic-auth haproxy needs to be reloaded after credentials update
- CLEANUP/MINOR haproxy module remove unused code left from refactor in 80839ac88
- CLEANUP/MINOR cleanup when handling deleted ingress annotations
- DOC Update cookie persistence description
- REORG/MINOR simplify handling of cookie persistence
- BUILD/MEDIUM e2e tests use k8s versions v1.19.3 v1.18.6 v1.17.5.
- BUILD/MINOR update RBAC in deploy files to fetch ingressclasses
- TEST Add IngressClass e2e test
- BUG/MEDIUM Fixing IngressClass support
- MINOR Rely on APIResourceList for Ingress API Discovery
- TEST/MEDIUM Set waitDuration to 15s and tickDuration to 2s
- REORG/MINOR haproxy rules handle RuleIDs inside haproxy module
- REORG/MINOR split annotations.go in different files
- CLEANUP/MINOR remove cfgsnippet code left from refactor on 80839ac88
- DOC add ssl-redirect-port annotation documentation
- MINOR HTTPS redirection port freely adjustable in HTTP to HTTPS redirection.
- DOC split config-snippet into global and backend declinations
- REORG/MAJOR refactor global and backend annotations
- MINOR HandleTLSSecret returns an error type instead of store.Status
- CLEANUP/MINOR Maps Remove unused code
- DOC server-ca/server-crt/server-proto documentation
- MEDIUM add server-ca and server-crt annotations.
- REFACTOR/MEDIUM refactor secrets handling code and move it to haproxy package
- MINOR Servers add server-proto annotation
- MINOR formatting startup logs
- BUG/MINOR Endpoints trigger a reload if dynamic update fails
- MINOR use numbers instead of random string in server names
- REORG/MEDIUM Use array instead of map for endpoints
- DOC add scale-server-slots annotation
- MEDIUM endpoints dont limit haproxy backend scaling
- Endpoints REORG/MINOR remove AddrsUsed field
- BUG/MEDIUM Endpoints addresses should be passed by value to PortEndpoints
- BUG/MEDIUM endpoints state is not synced when they scale down to zero
- BUG/MINOR Prevent aligning of backends for externalName services
- MINOR replace shell processes with system calls
- MAJOR build using by default GODEBUG=madvdontneed=1
- DOC Update documentation link
- BUG/MINOR Srv annotations preserve reload status
- MEDIUM runtime-maps dynamic update
- BUILD/MINOR client-native update to latest
- MEDIUM remove MapID and use simple string instead
- MINOR maps add preserve flag
- Backend HAProxy MINOR reload only when creating new backends
- HAProxy MEDIUM rules reload only when creating new rules
- TEST/MINOR PathTypeExact is not available before k8s 1.18
- MINOR Fix linting issues
- CLEANUP/MINOR No need for ACL in X-Forwarded-Proto
- Ingres MINOR rules support Prefix PathType.
- Ingress MINOR rules support Host wildcard
- TEST/MINOR Test Ingress rules matching
- CLEANUP/MINOR maps remove unused error functions
- BUILD/MAJOR container unprivileged use k8s securityContext
- BUILD/MINOR update deploy files to include networking.k8s.io
- TEST/MINOR enable HAProxy stdout logging
- REORG/MINOR Add missing new lines at the end of some files
- DOC/MINOR add example how kind environment can be run
- CLEANUP/MINOR kind lock k8s version to be more consistent
- CLEANUP/MINOR rephrase HAProxy config sync log message
- BUILD/MAJOR allow go optimisations
- BUG/MINOR Remove lowercasing on path
- BUILD/MEDIUM Use InitContainers to configure unprivileged ports
- BUILD/MAJOR Run ingress controller in Rootless container
- BUILD/MEDIUM dockerfile reducing container image layers with optimization
- BUILD/MINOR haproxy bumping to release 2.2
- TEST/MINOR Merge Host and Path ingress match tests
- TEST/MEDIUM Use the same deployment image for all tests
- TEST/MINOR Add multiple Ingress rules to a new Ingress
- TEST/MINOR No need for release parameter
- TEST/MINOR Fix some naming issues.
- BUG/MINOR Removed secrets are not deleted from store
- BUG/MINOR Dont replicate HAProxy rules
- MAJOR change HAProxy rules matching
- MAJOR backend switching use Haproy Map Files
- BUG/MINOR The FORWARDED_PROTO rule should be a request rule and not a response one.
- MINOR handle multiple default routes
- MINOR api avoid a nil pointer dereference with APIStartTransaction
- MINOR use HAProxyBinary variable instead of hardcoded haproxy
- BUG/MEDIUM all backend servers are deleted when there are more servers than server-slots
- BUG/MINOR user defined default backends should be marked on activeBackends.
- BUG/MINOR ssl-passthroug uses incorrend backend name.
- TEST/MINOR Check if Namespace exists before creation
- BUG/MEDIUM endpoints set BackendName
- TEST Run tests in specific NS
- REORG/MINOR handlers add refresh handler
- MAJOR refactor and move Ingress routes related task to a different package.
- REORG/MAJOR ingress use ingressRoute struct storing the context of an IngressPath
- MINOR logging change formatting of few logs
- DOC/MINOR backport hard-stop-after annotation to v1.4
- DOC/MINOR backport server-slots annotation to v1.4
- BUG/MEDIUM endpoints Mixing addresses related to different ports
- OPTIM/MEDIUM restrict backend servers to server-slots value
- BUILD/MINOR github bumping up golangci-lint GitHub action
- BUILD/MINOR github Upgrading KinD action due to deprecation path
- DOC/MINOR documenting Basic Authentication Ingress annotations
- CLEANUP/MINOR fmt resolving goimports formating
- TEST/MINOR integration test for Basic Auth
- TEST/MINOR failing in case of unrecoverable error
- REORG/MINOR test giving more context on kind of Secret creating
- MEDIUM frontend supporting Basic Authentication
- BUILD/MINOR increasing golang-ci lint timeout
- TEST reorg avoiding nil pointer dereference and naming uniformity
- DOC/MINOR annotation rate-limit-size is handled at Ingress level too
- DOC fixing typo on indentation
- HAProxy MINOR maps simplify content management.
- CLEANUP haproxy rules no need for MapID index.
- REORG group in same file functions of same logic
- DOC/MINOR Fix ambiguous whitelist description
- TEST/MAJOR tests add kind tests to gitlab ci
- DOC hard-stop-after annotation
- Add MINOR annotation global hard-stop-after
- MINOR typo various grammatical typo
- TEST/MINOR testing set-src-ip and blacklist annotations
- DOC/MINOR documenting the src-ip-header global annotation
- MINOR adding set source rule as global annotation
- TEST/MINOR set-host as Ingress annotation
- TEST/MINOR testing set header for request and response
- TEST/MINOR Ingress rate limiting (requests period custom code)
- BUG/MEDIUM access control fixing rules order
- BUG/MEDIUM rate-limite tracking tables not created
- BUG/MEDIUM crash if no controller class provided.
- MINOR properly handle transaction dir in test suite
- BUG/MINOR deleting frontend rules in f69b22a may leave old rules.
- MINOR Add program controller arg.
- MAJOR Configure an HAProxy instance outside of k8s.
- MINOR Setup HAProxy config directory when running out of k8s cluster
- REORG make HAProxyCfgDir a global variable
- BUILD upgrade to config-parser v3
- MINOR Change initial socket path for bind lines
- REORG Remove Set prefix from global API funcs
- MINOR ingress using GetValueFromAnnotations for ingress class name retrieval
- BUILD/MINOR supporting networking.k8s.io ingress and ingressclass
- MEDIUM fixing e6dd2b3 and making IngressClass no more mandatory
- MINOR ingress handling exact path matching
- MINOR ingress supporting IngressClass by networking.k8s.io
- DOC/MINOR typo on docs and source code
- MEDIUM supporting kubernetes 1.19 (networking.k8s.io ingress)
- OPTIM/MINOR controller using struct events channel
- MINOR Add stacking errors
- MAJOR Refactor HAProxy Rules and move them to a seperate package.
- REORG maps rename key to mapID
- TEST/MINOR kind run create.sh from any directory
- BUILD github too many white-spaces
- BUILD github decoupling lint and commit subject
- TEST/MAJOR reorg and fixing various test cases
- TEST/MINOR upstream proxy-protocol v1
- BUILD Fix linting capitalized error string
- BUG/MINOR endpoints abort processing when TargetPort not found
- BUG/MEDIUM handlers Configuration should be passed by reference
- BUG/MEDIUM ssl-passthrough confilicts with ssl-offloading
- BUG ssl offloading Fix typo in offloading condition introduced in 91bccbe
- BUG/MAJOR fixing ssl offloading regression introduced in db51a5dbb6
- BUG/MINOR ssl using user addresses on passthrough activation
- MINOR using config-parser for bind options init
- BUG/MINOR frontend not reloading after binding init
- CLEANUP/MINOR logs non polluting logs for useless details
- DOC documenting changes introduced with db51a5db
- BUG/MINOR update HAProxy rules when ssl-redirect-code annotation is updated.
- DOC SSL section reviewed
- BUG/MINOR SSL redirection does not handle Ingress deletion
- REORG Check Ingress rules are not empty before handling Annotations
- MINOR align inspect-delay on timeout-client instead of timeout-connect
- CLEANUP tests using more expressive name for test client
- MINOR tests tls/ssl redirect
- MINOR tests testing HTTPS frontend
- MINOR tests testing SSL passthrough
- BUG/MINOR not exposing HTTPS port on KinD
- MINOR tests endpoints out and in scaling
- MINOR tests host-based matching
- MINOR tests path matching with URL rewrite
- REORG/MINOR tests structuring tests and utilities
- BUG/MINOR Move Ingress annotations set-host and path-rewrite to frontends
- MINOR backend switching use variables instead of sample fetches.
- BUG/MINOR Make tcp inspect-delay timeout match timeout connect
- DOC/MINOR ssl documenting the local SSL port upon passthrough
- MEDIUM frontend custom bind port and frontend and IP protocol toggling
- MINOR events race conditions fix due to Helm posthooks
- OPTIM/MINOR handling annotations overwritten by config-snippet
- DOC add stick-table info in rate-limit-requests and fix typos.
- MINOR annotations configurable rate limiting status code
- CLEANUP/MINOR doc correct example for syslog-server
- DOC/MINOR syslog-server document default field values
- MEDIUM annotations frontend/ingress Expand ingress matching to include path
- MINOR update haproxy set-var rules
- BUG/MINOR dont overwrite Ingress rules with same host
- EE REORG Move modules initialization to a seperate function
- EE REORG Move WAF code to a dedicated handler
- REORG group controllers refresh functions
- REORG move TCP handling to the UpdateHandler interface
- REORG move https handling to the UpdateHandler interface
- REORG move enable/disable of SSLOffloading to haproxy/api module
- MEDIUM Set Logging at module level rather than struct level
- MAJOR move k8s resources to seperate module named store
- OPTIM/MEDIUM endpoints dont reload HAProxy if the only change is the endpoints address
- OPTIM/MINOR endpoints use a map instead of a slice for endpoint ports
- OPTIM/MINOR endpoints no need to lookup server annotations at each server iteration
- REORG endpoints Move processEndpointsSrvs out of kuberntes events handling
- OPTIM/MAJOR endpoints handle backend server slots in the main loop
- CLEANUP endpoints remove some over-engineered code and uncessary pointers
- OPTIM/MINOR No need to return Error to the main loop when handling Ingress services
- REORG Refactoring ConfigMaps
- REORG Change FrontendRulesStatus/BackendSwitchingStatus to FrontendRulesModified/BackendSwitchingModified
- DOC/MAJOR generate docs from yaml
- BUILD Remove multibinder
- BUG/MINOR Dont fail if ExternalName Service is not resolving
- BUG/MAJOR clean controller state even when HAProxy sync fails
- DOC Add CORS annotations
- MEDIUM Add CORS support via HAProxy response rules
- Frontend REORG/MINOR annotations reorg handlers
- DOC/MEDIUM Fixed doc formatting
- REORG/MEDIUM haproxy rules handle Ingress ACL at the api client level
- BUG/MEDIUM dont clear ruleIDs buffer when handling ingress rules
- DOC fix typos in --configmap-errorfile argument
- DOC add auth-realm annotation
- MINOR add auth-realm annotation
- MINOR basic-auth ignoring last character \n in password
- MINOR basic-auth keep haproxy auth rule even if auth-secret is not available
- REVERT commit 2ebd7ef4008fb42d251e9fa8627bfe0c17d5079c
- BUILD/MINOR update check-commit action
- DOC/MEDIUM Replaced <pre> tags with Markdown code blocks. Put code keyword backticks around some keywords. Improved grammar in a few descriptions. Changed the auth-secret definition so that the description of the values is under the values key instead of the description key. This makes the table where we show the description only more succinct. For auth-type and auth-secret the example now shows both of these keys together because they are dependant upon one another.
- DOC/MINOR Edit config-snippet description
- DOC recover --configmap-errorfile doc lost in b1d44b902
- BUG/MEDIUM avoid nil pointer dereference in k8s versions < 1.14
- BUG/MINOR avoid nil pointer dereference in basic-auth handling
- DOC add documentation of request-redirect and request-redirect-code annotations
- MINOR Add HTTP redirection with annotation request-redirect
- DOC Add more details about basic-auth
- OPTIM/MINOR basic-auth optimizations
- BUG/MINOR basic-auth haproxy needs to be reloaded after credentials update
- CLEANUP/MINOR haproxy module remove unused code left from refactor in 80839ac88
- CLEANUP/MINOR cleanup when handling deleted ingress annotations
- DOC Update cookie persistence description
- REORG/MINOR simplify handling of cookie persistence
- BUILD/MEDIUM e2e tests use k8s versions v1.19.3 v1.18.6 v1.17.5.
- BUILD/MINOR update RBAC in deploy files to fetch ingressclasses
- TEST Add IngressClass e2e test
- BUG/MEDIUM Fixing IngressClass support
- MINOR Rely on APIResourceList for Ingress API Discovery
- TEST/MEDIUM Set waitDuration to 15s and tickDuration to 2s
- REORG/MINOR haproxy rules handle RuleIDs inside haproxy module
- REORG/MINOR split annotations.go in different files
- CLEANUP/MINOR remove cfgsnippet code left from refactor on 80839ac88
- DOC add ssl-redirect-port annotation documentation
- MINOR HTTPS redirection port freely adjustable in HTTP to HTTPS redirection.
- DOC split config-snippet into global and backend declinations
- REORG/MAJOR refactor global and backend annotations
- MINOR HandleTLSSecret returns an error type instead of store.Status
- CLEANUP/MINOR Maps Remove unused code
- DOC server-ca/server-crt/server-proto documentation
- MEDIUM add server-ca and server-crt annotations.
- REFACTOR/MEDIUM refactor secrets handling code and move it to haproxy package
- MINOR Servers add server-proto annotation
- MINOR formatting startup logs
- BUG/MINOR Endpoints trigger a reload if dynamic update fails
- MINOR use numbers instead of random string in server names
- REORG/MEDIUM Use array instead of map for endpoints
- DOC add scale-server-slots annotation
- MEDIUM endpoints dont limit haproxy backend scaling
- Endpoints REORG/MINOR remove AddrsUsed field
- BUG/MEDIUM Endpoints addresses should be passed by value to PortEndpoints
- BUG/MEDIUM endpoints state is not synced when they scale down to zero
- BUG/MINOR Prevent aligning of backends for externalName services
- MINOR replace shell processes with system calls
- MAJOR build using by default GODEBUG=madvdontneed=1
- DOC Update documentation link
- BUG/MINOR Srv annotations preserve reload status
- MEDIUM runtime-maps dynamic update
- BUILD/MINOR client-native update to latest
- MEDIUM remove MapID and use simple string instead
- MINOR maps add preserve flag
- Backend HAProxy MINOR reload only when creating new backends
- HAProxy MEDIUM rules reload only when creating new rules
- TEST/MINOR PathTypeExact is not available before k8s 1.18
- MINOR Fix linting issues
- CLEANUP/MINOR No need for ACL in X-Forwarded-Proto
- Ingres MINOR rules support Prefix PathType.
- Ingress MINOR rules support Host wildcard
- TEST/MINOR Test Ingress rules matching
- CLEANUP/MINOR maps remove unused error functions
- BUILD/MAJOR container unprivileged use k8s securityContext
- BUILD/MINOR update deploy files to include networking.k8s.io
- TEST/MINOR enable HAProxy stdout logging
- REORG/MINOR Add missing new lines at the end of some files
- DOC/MINOR add example how kind environment can be run
- CLEANUP/MINOR kind lock k8s version to be more consistent
- CLEANUP/MINOR rephrase HAProxy config sync log message
- BUILD/MAJOR allow go optimisations
- BUG/MINOR Remove lowercasing on path
- BUILD/MEDIUM Use InitContainers to configure unprivileged ports
- BUILD/MAJOR Run ingress controller in Rootless container
- BUILD/MEDIUM dockerfile reducing container image layers with optimization
- BUILD/MINOR haproxy bumping to release 2.3
- TEST/MINOR Merge Host and Path ingress match tests
- TEST/MEDIUM Use the same deployment image for all tests
- TEST/MINOR Add multiple Ingress rules to a new Ingress
- TEST/MINOR No need for release parameter
- TEST/MINOR Fix some naming issues.
- BUG/MINOR Removed secrets are not deleted from store
- BUG/MINOR Dont replicate HAProxy rules
- MAJOR change HAProxy rules matching
- MAJOR backend switching use Haproy Map Files
- BUG/MINOR The FORWARDED_PROTO rule should be a request rule and not a response one.
- MINOR handle multiple default routes
- MINOR api avoid a nil pointer dereference with APIStartTransaction
- MINOR use HAProxyBinary variable instead of hardcoded haproxy
- BUG/MEDIUM all backend servers are deleted when there are more servers than server-slots
- BUG/MINOR user defined default backends should be marked on activeBackends.
- BUG/MINOR ssl-passthroug uses incorrend backend name.
- TEST/MINOR Check if Namespace exists before creation
- BUG/MEDIUM endpoints set BackendName
- TEST Run tests in specific NS
- REORG/MINOR handlers add refresh handler
- MAJOR refactor and move Ingress routes related task to a different package.
- REORG/MAJOR ingress use ingressRoute struct storing the context of an IngressPath
- MINOR logging change formatting of few logs
- DOC/MINOR backport hard-stop-after annotation to v1.4
- DOC/MINOR backport server-slots annotation to v1.4
- BUG/MEDIUM endpoints Mixing addresses related to different ports
- OPTIM/MEDIUM restrict backend servers to server-slots value
- BUILD/MINOR github bumping up golangci-lint GitHub action
- BUILD/MINOR github Upgrading KinD action due to deprecation path
- DOC/MINOR documenting Basic Authentication Ingress annotations
- CLEANUP/MINOR fmt resolving goimports formating
- TEST/MINOR integration test for Basic Auth
- TEST/MINOR failing in case of unrecoverable error
- REORG/MINOR test giving more context on kind of Secret creating
- MEDIUM frontend supporting Basic Authentication
- BUILD/MINOR increasing golang-ci lint timeout
- TEST reorg avoiding nil pointer dereference and naming uniformity
- DOC/MINOR annotation rate-limit-size is handled at Ingress level too
- DOC fixing typo on indentation
- HAProxy MINOR maps simplify content management.
- CLEANUP haproxy rules no need for MapID index.
- REORG group in same file functions of same logic
- DOC/MINOR Fix ambiguous whitelist description
- TEST/MAJOR tests add kind tests to gitlab ci
- DOC hard-stop-after annotation
- Add MINOR annotation global hard-stop-after
- MINOR typo various grammatical typo
- TEST/MINOR testing set-src-ip and blacklist annotations
- DOC/MINOR documenting the src-ip-header global annotation
- MINOR adding set source rule as global annotation
- TEST/MINOR set-host as Ingress annotation
- TEST/MINOR testing set header for request and response
- TEST/MINOR Ingress rate limiting (requests period custom code)
- BUG/MEDIUM access control fixing rules order
- BUG/MEDIUM rate-limite tracking tables not created
- BUG/MEDIUM crash if no controller class provided.
- MINOR properly handle transaction dir in test suite
- BUG/MINOR deleting frontend rules in f69b22a may leave old rules.
- MINOR Add program controller arg.
- MAJOR Configure an HAProxy instance outside of k8s.
- MINOR Setup HAProxy config directory when running out of k8s cluster
- REORG make HAProxyCfgDir a global variable
- BUILD upgrade to config-parser v3
- MINOR Change initial socket path for bind lines
- REORG Remove Set prefix from global API funcs
- MINOR ingress using GetValueFromAnnotations for ingress class name retrieval
- BUILD/MINOR supporting networking.k8s.io ingress and ingressclass
- MEDIUM fixing e6dd2b3 and making IngressClass no more mandatory
- MINOR ingress handling exact path matching
- MINOR ingress supporting IngressClass by networking.k8s.io
- DOC/MINOR typo on docs and source code
- MEDIUM supporting kubernetes 1.19 (networking.k8s.io ingress)
- OPTIM/MINOR controller using struct events channel
- MINOR Add stacking errors
- MAJOR Refactor HAProxy Rules and move them to a seperate package.
- REORG maps rename key to mapID
- TEST/MINOR kind run create.sh from any directory
- BUILD github too many white-spaces
- BUILD github decoupling lint and commit subject
- TEST/MAJOR reorg and fixing various test cases
- TEST/MINOR upstream proxy-protocol v1
- BUILD Fix linting capitalized error string
- BUG/MINOR endpoints abort processing when TargetPort not found
- BUG/MEDIUM handlers Configuration should be passed by reference
- BUG/MEDIUM ssl-passthrough confilicts with ssl-offloading
- BUG ssl offloading Fix typo in offloading condition introduced in 91bccbe
- BUG/MAJOR fixing ssl offloading regression introduced in db51a5dbb6
- BUG/MINOR ssl using user addresses on passthrough activation
- MINOR using config-parser for bind options init
- BUG/MINOR frontend not reloading after binding init
- CLEANUP/MINOR logs non polluting logs for useless details
- DOC documenting changes introduced with db51a5db
- BUG/MINOR update HAProxy rules when ssl-redirect-code annotation is updated.
- DOC SSL section reviewed
- BUG/MINOR SSL redirection does not handle Ingress deletion
- REORG Check Ingress rules are not empty before handling Annotations
- MINOR align inspect-delay on timeout-client instead of timeout-connect
- CLEANUP tests using more expressive name for test client
- MINOR tests tls/ssl redirect
- MINOR tests testing HTTPS frontend
- MINOR tests testing SSL passthrough
- BUG/MINOR not exposing HTTPS port on KinD
- MINOR tests endpoints out and in scaling
- MINOR tests host-based matching
- MINOR tests path matching with URL rewrite