mirror of
https://github.com/taylanbakircioglu/haproxy-openmanager.git
synced 2026-09-16 23:55:13 +00:00
taylanbakircioglu
c19f0b5275
Root cause: After agent self-upgrade, the embedded daemon (SKIP_TO_DAEMON block) runs instead of run_daemon(). HAPROXY_BIN and HAPROXY_CONFIG variables were uninitialized before the daemon loop, causing SSL-triggered HAProxy reloads to silently fail with empty path validation. Changes: - Initialize HAPROXY_BIN/HAPROXY_CONFIG before embedded daemon loop - Add md5 checksum comparison in deploy_ssl_certificates() to detect actual cert file changes (avoid unnecessary writes and reloads) - Add check_ssl_updates() for independent SSL sync every ~2.5 min in run_daemon(), independent of config version changes - Add SSL-aware reload in check_config_updates(): if config validation fails but SSL certs changed, reload HAProxy with existing config - Add "full" fetch mode to fetch_and_deploy_ssl_certificates() to bypass incremental timestamp filter for standalone SSL checks Applied to both linux_install.sh and macos_install.sh. Co-authored-by: Cursor <cursoragent@cursor.com>