Automatically update haproxy image

[JanoschDeurer]

It would be great to use something like renovate or dependabot to automatically update the haproxy image so security fixes in haproxy are applied instantly.

[joao-p-marques]

It is a good idea! Maybe dependabot would be a good solution. @yajo?

[JanoschDeurer]

I'm using renovate myself so if you decide for that I could also provide some input.

[joao-p-marques]

If you are willing to make a PR with a start, that would be good.

[JanoschDeurer]

I forked and activated renovate on my repo. It seems that renovate has a problem with how the image is specified in the Dockerfile. I have an idea of how to solve it, but I'll have to further look into it. Is REPO build arg necessary for you? Otherwise I could just rewrite the FROM to:

FROM haproxy:1.9-alpine

Otherwise I'll have to look up how to override the regex renovate is using to find the location of the image string.

[joao-p-marques]

Ok, thank you.

As for the REPO arg, I would have to ask @yajo

[yajo]

We can't have such thing without good coverage. #34 is still more important IMHO.

[JanoschDeurer]

How about if we have nightly and stable versions? With this the user of the image could choose whether to always use the version with the latest haproxy or not.

I ran into this again because there is currently a permission problem with this repo and the latest haproxy image. I think it would be great if I could fix the issue that I am having in here so everyone can profit.

[yajo]

We now have the automation required for this to be acceptable. However, it's not our current priority. Community contributions welcome.