Revert "feat(traefik)!: Update helm-release ( 27.0.2 → 28.0.0 )"

[tyriis]

Reverts #2904

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

[tyriis-automation]

--- kubernetes/talos-flux/apps/traefik-ingress/traefik/app Kustomization: flux-system/apps-traefik HelmRelease: traefik-ingress/traefik

+++ kubernetes/talos-flux/apps/traefik-ingress/traefik/app Kustomization: flux-system/apps-traefik HelmRelease: traefik-ingress/traefik

@@ -12,13 +12,13 @@

     spec:
       chart: traefik
       sourceRef:
         kind: HelmRepository
         name: traefik-charts
         namespace: flux-system
-      version: 28.0.0
+      version: 27.0.2
   dependsOn:
   - name: cert-manager
     namespace: cert-manager
   interval: 5m
   values:
     additionalArguments:

[tyriis-automation]

--- HelmRelease: traefik-ingress/traefik ClusterRole: traefik-ingress/traefik-traefik-ingress

+++ HelmRelease: traefik-ingress/traefik ClusterRole: traefik-ingress/traefik-traefik-ingress

@@ -41,22 +41,22 @@

   resources:
   - ingresses/status
   verbs:
   - update
 - apiGroups:
   - traefik.io
+  - traefik.containo.us
   resources:
   - ingressroutes
   - ingressroutetcps
   - ingressrouteudps
   - middlewares
   - middlewaretcps
   - tlsoptions
   - tlsstores
   - traefikservices
   - serverstransports
-  - serverstransporttcps
   verbs:
   - get
   - list
   - watch
 
--- HelmRelease: traefik-ingress/traefik Deployment: traefik-ingress/traefik

+++ HelmRelease: traefik-ingress/traefik Deployment: traefik-ingress/traefik

@@ -32,13 +32,13 @@

         app.kubernetes.io/managed-by: Helm
     spec:
       serviceAccountName: traefik
       terminationGracePeriodSeconds: 60
       hostNetwork: false
       containers:
-      - image: docker.io/traefik:v3.0.0
+      - image: docker.io/traefik:v2.11.2
         imagePullPolicy: IfNotPresent
         name: traefik
         resources:
           limits:
             memory: 500Mi
           requests:
@@ -97,44 +97,40 @@

         - --serverstransport.insecureskipverify=true
         - --providers.kubernetesingress.ingressclass=traefik
         - --metrics.prometheus=true
         - --metrics.prometheus.entryPoint=metrics
         - --entryPoints.websecure.forwardedHeaders.trustedIPs=10.0.0.0/8,192.168.0.0/16,172.16.0.0/12,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,104.16.0.0/13,104.24.0.0/14,108.162.192.0/18,131.0.72.0/22,141.101.64.0/18,162.158.0.0/15,172.64.0.0/13,173.245.48.0/20,188.114.96.0/20,190.93.240.0/20,197.234.240.0/22,198.41.128.0/17,2400:cb00::/32,2606:4700::/32,2803:f800::/32,2405:b500::/32,2405:8100::/32,2a06:98c0::/29,2c0f:f248::/32
         - --entryPoints.minecraft.address=:19132/udp
-        - --entryPoints.metrics.address=:8082/tcp
-        - --entryPoints.minecraft.address=:19132/udp
-        - --entryPoints.traefik.address=:9000/tcp
-        - --entryPoints.web.address=:8000/tcp
-        - --entryPoints.websecure.address=:8443/tcp
+        - --entrypoints.metrics.address=:8082/tcp
+        - --entrypoints.minecraft.address=:19132/udp
+        - --entrypoints.traefik.address=:9000/tcp
+        - --entrypoints.web.address=:8000/tcp
+        - --entrypoints.websecure.address=:8443/tcp
         - --api.dashboard=true
         - --ping=true
         - --metrics.prometheus=true
         - --metrics.prometheus.entrypoint=metrics
         - --providers.kubernetescrd
         - --providers.kubernetescrd.allowCrossNamespace=true
         - --providers.kubernetescrd.allowExternalNameServices=true
         - --providers.kubernetesingress
-        - --entryPoints.web.http.redirections.entryPoint.to=:443
-        - --entryPoints.web.http.redirections.entryPoint.scheme=https
-        - --entryPoints.websecure.http.tls=true
-        - --entryPoints.websecure.http.tls.options=default
-        - --entryPoints.websecure.http.tls.domains[0].sans=*.
+        - --entrypoints.web.http.redirections.entryPoint.to=:443
+        - --entrypoints.web.http.redirections.entryPoint.scheme=https
+        - --entrypoints.websecure.http.tls=true
+        - --entrypoints.websecure.http.tls.options=default
+        - --entrypoints.websecure.http.tls.domains[0].sans=*.
         - --log.format=json
         - --log.level=INFO
         - --accesslog=true
         - --accesslog.format=json
         - --accesslog.fields.defaultmode=keep
         - --accesslog.fields.headers.defaultmode=drop
         - --providers.kubernetesingress.ingressendpoint.ip=192.168.1.80
         - --providers.kubernetesingress.allowexternalnameservices=true
         - --providers.kubernetescrd.allowexternalnameservices=true
         env:
-        - name: GOMEMLIMIT
-          valueFrom:
-            resourceFieldRef:
-              resource: limits.memory
         - name: POD_NAME
           valueFrom:
             fieldRef:
               fieldPath: metadata.name
         - name: POD_NAMESPACE
           valueFrom:

[tyriis-automation]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ EDITORCONFIG	editorconfig-checker	1		0	0.01s
✅ REPOSITORY	gitleaks	yes		no	2.25s
✅ YAML	prettier	1		0	0.7s
✅ YAML	yamllint	1		0	0.31s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security