LoginSign Up
← Back to all sparks
H

HAProxy Kubernetes Ingress Controller

INFRA · APIS
Velocity5.0

Ingress controller bringing HAProxy load balancing to Kubernetes

www.haproxy.com/documentation/kubernetes-ingress ↗

Nineteen patches into 3.2, HAProxy's ingress controller is mostly bumping dependencies

ingress-controllerhaproxykubernetespatch-releasedependenciestls
◆Current state
The controller remains on the 3.2 patch line. Since v3.2.14 the only release of substance is v3.2.15, which stopped filtering ingresses on IngressClass name at ingestion, reworked status publishing and moved to Go 1.27. Later patches are mainly dependency and tooling updates, with v3.2.18 keeping every TLS secret of an ingress on the same host and v3.2.19 fixing a data race on the reload flag.
◆Where it's heading
The ssl-passthrough theme has faded, and the series is now closer to routine upkeep than stabilization. Fixes have moved to ingress class handling, TLS secret storage and concurrency, with test coverage arriving in the same changes. Patches keep coming, but no new configuration surface has appeared on this line in the entries shown, apart from amending the SSL frontend through a custom resource in v3.2.15.
◆Prediction
Expect further patches dominated by go.mod and Kubernetes client updates, with new capability waiting for a later line.

◆Recent moves

  1. 7d ago

    v3.2.19: reload flag data race fix and x/ package bumps

    A golang.org/x bump and a minor fix for a data race on the pending reload flag. Routine upkeep on the patch line.

    View source ↗
  2. 17d ago

    v3.2.18: keeps all TLS secrets per host, CRD panic fix

    Keeps every TLS secret of an ingress for the same host and stops a panic on unparseable CRD version annotations. The TLS fix is the one change in recent patches that operators could notice directly.

    View source ↗
  3. 22d ago

    v3.2.17: k8s.io, x/ and client-native dependency updates

    Dependency updates for k8s.io, golang.org/x and client-native, plus a small snippet cleanup. No user-facing change is described.

    View source ↗
  4. 1mo ago

    v3.2.16: dependency, CI and test maintenance

    Dependency, CI and end-to-end test maintenance, including the tested Kubernetes range. Nothing here changes behavior for operators.

    View source ↗
  5. 1mo ago

    v3.2.15: IngressClass ingestion fix, status rework, Go 1.27

    Stops filtering ingresses on IngressClass name at ingestion, reworks status publishing, allows amending the SSL frontend through a custom resource and moves to Go 1.27. This is the largest patch in the recent run, and it marks the shift away from passthrough fixes.

    View source ↗
  6. 2mo ago

    ssl-passthrough allow/deny lists retained on the https frontend

    Two BUG/MEDIUM fixes on top of routine Go and k8s.io dependency bumps. The load-bearing one keeps allow and deny lists attached to the https frontend under cluster passthrough — an access-control rule silently dropping is worth noticing — and it ships with a test covering that case. The second stops the controller duplicating the default local backend config snippet.

    View source ↗