From c2934c612cb4ec6dd157fb85936286cef17a99bd Mon Sep 17 00:00:00 2001
From: Bapung <bapung@protonmail.com>
Date: Mon, 22 Dec 2025 22:32:46 +0800
Subject: [PATCH 1/3] add .Values.controller.daemonset.extraHostPorts

---
 haproxy-ingress/templates/_podtemplate.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/haproxy-ingress/templates/_podtemplate.yaml b/haproxy-ingress/templates/_podtemplate.yaml
index dba5121..09f6626 100644
--- a/haproxy-ingress/templates/_podtemplate.yaml
+++ b/haproxy-ingress/templates/_podtemplate.yaml
@@ -362,6 +362,13 @@ spec:
     {{- end }}
   {{- end }}
 {{- end }}
+{{- if $.Values.controller.daemonset.useHostPort }}
+{{- range $row := .Values.controller.daemonset.extraHostPorts }}
+- name: "extra-port-{{ $row.port }}"
+  containerPort: {{ $row.containerPort }}
+  hostPort: {{ $row.hostPort }}
+{{- end }}
+{{- end }}
 {{- end }}
 
 {{- define "haproxy-ingress.controller.probes" }}

From 6f162166df3b139993cd074d684d1defd441c438 Mon Sep 17 00:00:00 2001
From: Bapung <bapung@protonmail.com>
Date: Mon, 22 Dec 2025 22:36:11 +0800
Subject: [PATCH 2/3] update haproxy-ingress/README.md to include new value

---
 haproxy-ingress/README.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/haproxy-ingress/README.md b/haproxy-ingress/README.md
index 442f636..db22a41 100644
--- a/haproxy-ingress/README.md
+++ b/haproxy-ingress/README.md
@@ -172,6 +172,7 @@ Parameter | Description | Default
 `controller.daemonset.hostPorts.http` | If `controller.daemonset.useHostPort` is `true` and this is non-empty sets the hostPort for http | `"80"`
 `controller.daemonset.hostPorts.https` | If `controller.daemonset.useHostPort` is `true` and this is non-empty sets the hostPort for https | `"443"`
 `controller.daemonset.hostPorts.tcp` | If `controller.daemonset.useHostPort` is `true` use hostport for these ports from `tcp` | `[]`
+`controller.daemonset.extraHostPorts` | If `controller.daemonset.useHostPort` is `true` configure additional host ports mapping. Each entry should specify `port`, `containerPort`, and `hostPort` | `[]`
 `controller.updateStrategy` | the update strategy settings | _see defaults below_
 `controller.updateStrategy.type` | the update strategy type to use | `RollingUpdate`
 `controller.updateStrategy.rollingUpdate.maxUnavailable` | the max number of unavailable controllers when doing rolling updates | `1`

From f482c60f92d053ae324e9000992d5791688788cf Mon Sep 17 00:00:00 2001
From: Bapung <bapung@protonmail.com>
Date: Mon, 5 Jan 2026 00:07:31 +0800
Subject: [PATCH 3/3] add kind==DaemonSet check and explicit protocol: TCP

---
 haproxy-ingress/templates/_podtemplate.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/haproxy-ingress/templates/_podtemplate.yaml b/haproxy-ingress/templates/_podtemplate.yaml
index 09f6626..b836ed3 100644
--- a/haproxy-ingress/templates/_podtemplate.yaml
+++ b/haproxy-ingress/templates/_podtemplate.yaml
@@ -362,14 +362,18 @@ spec:
     {{- end }}
   {{- end }}
 {{- end }}
+
+{{- if eq $.Values.controller.kind "DaemonSet" }}
 {{- if $.Values.controller.daemonset.useHostPort }}
 {{- range $row := .Values.controller.daemonset.extraHostPorts }}
 - name: "extra-port-{{ $row.port }}"
   containerPort: {{ $row.containerPort }}
+  protocol: TCP
   hostPort: {{ $row.hostPort }}
 {{- end }}
 {{- end }}
 {{- end }}
+{{- end }}
 
 {{- define "haproxy-ingress.controller.probes" }}
 livenessProbe: