restrict haproxy version so the config file doesn't break. some minor

tweaks to that config file as well

haproxy.cfg

 global
-  log 127.0.0.1 local0
-  log 127.0.0.1 local1 notice
-  log-send-hostname
   maxconn 4096
-  pidfile /var/run/haproxy.pid
   user nobody
   group nogroup
   daemon
   ssl-default-bind-options no-sslv3
   ssl-default-bind-ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:DHE-DSS-AES128-SHA:DES-CBC3-SHA
+  tune.ssl.default-dh-param 2048
 defaults
-  balance roundrobin
   log global
   mode tcp
   option tcplog
   option dontlognull
   option dontlog-normal
+  timeout client 30s
+  timeout server 30s
+  timeout connect 30s
   timeout tunnel 86400s
+  timeout check 10s
 listen redis
   bind :6379 ssl crt /etc/ssl/private/tls.crt
   mode tcp
+  option tcpka
   option tcp-check
   tcp-check connect
   tcp-check send AUTH\ [[PASSWORD]]\r\n

values.yaml

@@ -17,7 +17,7 @@ sentinel:
 
 proxy:
   repository: haproxy
-  tag: latest
+  tag: 1.9
   pullPolicy: Always
   resources: {}