haproxy config now uses a named default section (silences warnings).

container/haproxy.cfg

@@ -13,7 +13,7 @@ global
         ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets
         tune.ssl.default-dh-param 2048
 
-defaults
+defaults tcp_defaults
 	log	global
 	mode	tcp
 	option	tcplog
@@ -33,30 +33,30 @@ program crt-dnldr
         command /usr/bin/k8s-crt-dnldr --addr unix@/run/offload/crt-dnldr.sock --base /etc/ssl/private -pemGid 998 -udsGid 998 -udsMode 0660 --namespace %%POD_NAMESPACE%%
         no option start-on-reload
 
-frontend readiness
+frontend readiness from tcp_defaults
          bind :8443
          mode http
          default_backend varnish_readiness
          http-request set-path /ready
          option httplog
 
-backend varnish_readiness
+backend varnish_readiness from tcp_defaults
 	server varnish_k8s "localhost:${VARNISH_READY_PORT}" check
         mode http
 
-frontend stats
+frontend stats from tcp_defaults
          bind :9443
          mode http
          stats uri /stats
          http-request use-service prometheus-exporter if { path /metrics }
          option httplog
 
-frontend crt-dnldr
+frontend crt-dnldr from tcp_defaults
          bind :5556
          mode http
          option httplog
          default_backend crt-dnldr
 
-backend crt-dnldr
+backend crt-dnldr from tcp_defaults
         server crt-dnldr unix@/crt-dnldr.sock check
         mode http