Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add net bind capability to haproxy bin #1096

Merged
merged 1 commit into from
May 4, 2024
Merged

Add net bind capability to haproxy bin #1096

merged 1 commit into from
May 4, 2024

Conversation

jcmoraisjr
Copy link
Owner

HAProxy Ingress starts now as the non privileged user haproxy, and this is the same user that starts the embedded haproxy process. Some container runtimes do not configure the unprivileged_port_start param from the default 1024 to 0, which makes the embedded haproxy process fail to bind to 80/443 ports. Adding the net bind capability to the haproxy binary allows it to bind to any tcp port, without running as a privileged user, and without configuring unprivileged_port_start param.

HAProxy Ingress starts now as the non privileged user haproxy, and this
is the same user that starts the embedded haproxy process. Some
container runtimes do not configure the unprivileged_port_start param
from the default 1024 to 0, which makes the embedded haproxy process
fail to bind to 80/443 ports. Adding the net bind capability to the
haproxy binary allows it to bind to any tcp port, without running as a
privileged user, and without configuring unprivileged_port_start param.
@github-actions github-actions bot added the Stale label Apr 22, 2024
@github-actions github-actions bot closed this Apr 29, 2024
@jcmoraisjr jcmoraisjr reopened this May 1, 2024
@jcmoraisjr jcmoraisjr removed the Stale label May 1, 2024
@jcmoraisjr jcmoraisjr merged commit c52386c into master May 4, 2024
4 checks passed
@jcmoraisjr jcmoraisjr deleted the jm-setcap branch May 4, 2024 00:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant