global
  user         haproxy
  group        haproxy
  log /dev/log local0
  log /dev/log local1 notice
  daemon
  
defaults
  mode                    http
  log                     global
  option                  httplog
  option                  dontlognull
  option http-server-close
  option forwardfor       except 127.0.0.0/8
  option                  redispatch
  retries                 1
  timeout http-request    10s
  timeout queue           20s
  timeout connect         5s
  timeout client          20s
  timeout server          20s
  timeout http-keep-alive 10s
  timeout check           10s
  
frontend apiserver
  bind *:6443
  mode tcp
  option tcplog
  default_backend apiserver
  
backend apiserver
  option httpchk GET /healthz
  http-check expect status 200
  mode tcp
  option ssl-hello-chk
  balance roundrobin
    server worker-4 10.1.1.9:6442 check
    server worker-3 172.28.0.19:6442 check