Fix formation of the PEM file for TLS offload.

pkg/controller/secret.go

@@ -83,11 +83,14 @@ func (worker *NamespaceWorker) updateCertSecret(spec *haproxy.Spec) error {
 		return err
 	}
 	pem := string(crt)
-	if crt[len(crt)+1] != byte('\n') {
+	if crt[len(crt)-1] != byte('\n') {
 		pem += "\n"
 	}
 	pem += string(key)
 	certName := spec.CertName()
+	if certSecret.Data == nil {
+		certSecret.Data = make(map[string][]byte)
+	}
 	certSecret.Data[certName] = []byte(pem)
 
 	worker.log.Infof("Updating Secret %s/%s with %s to add contents from "+