Bug 1891777

Summary: Update to haproxy version 1.8.26 for adding the samesite feature using the attr attribue in haproxy 1.8.26
Product: Red Hat Enterprise Linux 7 Reporter: Miheer Salunke <misalunk>
Component: haproxyAssignee: Ryan O'Hara <rohara>
Status: CLOSED NOTABUG QA Contact: Brandon Perkins <bperkins>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 7.0CC: rheinzma
Target Milestone: rcKeywords: FutureFeature
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-10-29 17:45:10 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 4 Miheer Salunke 2020-10-28 07:14:25 UTC
Description of problem:
Update to haproxy version 1.8.26 for adding the samesite feature using the attr attribue in haproxy 1.8.26

I have written a RFE which is a critical requirement for some major and important clients of openshift which is Samesite in openshift router wherein we require the attr attribute of haproxy 1.8.26

Samesite feature https://github.com/openshift/origin/pull/25542

The Dockerfile in the router code https://github.com/openshift/origin/pull/24958#issuecomment-717133548

uses centos-openshift-origin.repo 

https://github.com/openshift/origin/pull/24958/commits/5566962f2f0c97bb46ca1867ed1d19a3e46cc938

which will require the following ->
https://github.com/openshift/origin/pull/24958#issuecomment-717133548
-------------
Wait until the SPRM for the enterprise version is published -> https://ftp.redhat.com/redhat/linux/enterprise/7Server/en/RHOSE/SRPMS/
Someone should drop a mail at the CentOS PASS SIG group if someone could start to rebuilt the rpm and publish to the mirror.centos.org repository.
--------------


So we need the latest haproxy version of 1.8 which is 1.8.26 so that the router in OCP 3.11 will use that version and the SameSite feature will work smoothly.


Version-Release number of selected component (if applicable):

Repo centos-openshift-origin.repo
Image openshift/origin-cli  
Current old image 1.8.23 at http://mirror.centos.org/centos/7/paas/x86_64/openshift-origin311/

which needs to be replaced with haproxy 1.8.26

How reproducible:
Always

Steps to Reproduce:
1.
2.
3.

Actual results:

https://github.com/openshift/origin/pull/24958/commits/5566962f2f0c97bb46ca1867ed1d19a3e46cc938  installs haproxy 1.8.23

Expected results:

https://github.com/openshift/origin/pull/24958/commits/5566962f2f0c97bb46ca1867ed1d19a3e46cc938  installs haproxy 1.8.26

Additional info:

SameSite bug ->https://bugzilla.redhat.com/show_bug.cgi?id=1879445

Comment 6 Miheer Salunke 2020-10-28 07:25:43 UTC
Just FYI, also filed an issue with centos sig https://github.com/CentOS-PaaS-SIG/paas-sig-ci/issues/99