Add the following to helm values:
controller:
config:
backend-config-snippet: |
filter spoe engine coraza config /etc/haproxy/coraza/coraza.conf
http-request deny if { var(txn.coraza.action) -m str deny }
See that haproxy fails to reload, inspect the faulty config in /etc/haproxy/failed and see that the default backend is indeed broken by duplication:
backend app_svc_default-local-service_http from haproxytech
mode http
balance roundrobin
option forwardfor
no option abortonclose
default-server check
###_config-snippet_### BEGIN
### configmap:app/app-haproxytech-ingress-alpha ###
filter spoe engine coraza config /etc/haproxy/coraza/coraza.conf
http-request deny if { var(txn.coraza.action) -m str deny }
### service:app_svc_default-local-service_http/app/default-local-service ###
filter spoe engine coraza config /etc/haproxy/coraza/coraza.conf
http-request deny if { var(txn.coraza.action) -m str deny }
###_config-snippet_### END
server SRV_1 127.0.0.1:6061 enabledIt's probably related to this part
|
} else { |
|
defaultLocalService.Annotations = k8sStore.ConfigMaps.Main.Annotations |
|
} |
My chart is haproxytech/kubernetes-ingress 1.52.1
Add the following to helm values:
See that haproxy fails to reload, inspect the faulty config in /etc/haproxy/failed and see that the default backend is indeed broken by duplication:
It's probably related to this part
kubernetes-ingress/pkg/controller/global.go
Lines 216 to 218 in fc12067
My chart is haproxytech/kubernetes-ingress 1.52.1