* Update traefik version from 1.7.23 to 1.7.24
Signed-off-by: Sebastian Brandt <sebbrandt@mailbox.org>
* chart and app version raised for traefik
Signed-off-by: Sebastian Brandt <sebbrandt@mailbox.org>
* README.md updated for traefik
Signed-off-by: Sebastian Brandt <sebbrandt@mailbox.org>
* Update traefik version from 1.7.20 to 1.7.23
a610f0b2 Force http/1.1 for upgrade (Traefik v1)
ded285be Fix sameSite (Traefik v1)
4b31d330 fix: max TLS version.
91b0e2e4 Complete TLS example for Kubernetes Ingress in user guide
554bceb7 Skip redirection with invalid regex syntax.
ce762126 fix: manual provider code name.
d474c87c Updated rbac and demonset example bloc
86277223 Update to go1.14
09fa1e65 Fix typo in user guide.
c3125104 Clear closed hijacked h2c connections
d7ed42d6 Fix sample for ssl-header in docs
4c709c2f Improve rate-limiting doc
8dac0767 Fix finding proper provided certificate when ACME is enabled
0b039499 don't create http client in each request in forward auth
21249754 Fix dnspod update.
e4725619 Update the k8s api version in the documentation
d24f7822 fix: skip ECS container when information are missing instead of panic.
3f1925e2 Add edge case for root path with rewrite-target
Signed-off-by: Joe Julian <me@joejulian.name>
* Update readme
Signed-off-by: David Karlsen <david@davidkarlsen.com>
* bump chart version
Signed-off-by: David Karlsen <david@davidkarlsen.com>
Co-authored-by: David Karlsen <david@davidkarlsen.com>
* [stable/traefik] Add distinct container SecurityContext tunable (#20743)
Signed-off-by: David Kirchner <dpk@dpk.net>
* [stable/traefik] Update new securityContext K8S API links to something more up to date
Signed-off-by: David Kirchner <dpk@dpk.net>
* [stable/traefik] Added ability to provide extra certs to traefik at deployment time
Signed-off-by: Ryan Orth <ryanorth@workfront.com>
* [stable/traefik] Updated README.md and values.yaml based on review feedback
Signed-off-by: Ryan Orth <ryanorth@workfront.com>
* [stable/traefik] Performing version bump
Signed-off-by: Ryan Orth <ryanorth@workfront.com>
As specific startupArguments could be provided to the deployment, the sames
should be provided to the storeconfig job.
Signed-off-by: Jonathan Piron <jonathanpiron@gmail.com>
Before this PR, in case the dashboard was not enabled, the Prometheus metrics were disabled.
It is now possible to enable Prometheus metrics having at the same time the dashboard disabled.
Signed-off-by: Salvatore Mazzarino <dev@mazzarino.cz>
* [stable/traefik] allow labels and annotations to be specified
Signed-off-by: Nick Roberts (nickrobertssky) <nick.roberts@sky.uk>
* [stable/traefik] bump chart version
Signed-off-by: Nick Roberts (nickrobertssky) <nick.roberts@sky.uk>
* [stable/traefik] add new values to readme
Signed-off-by: Nick Roberts (nickrobertssky) <nick.roberts@sky.uk>
* [stable/traefik] fix issue when labels no specified
Signed-off-by: Nick Roberts (nickrobertssky) <nick.roberts@sky.uk>
* [stable/traefik] Updated acme storage location to be configurable
Signed-off-by: Ryan Orth <ryanorth@workfront.com>
* Fixed wrong version update
Signed-off-by: Ryan Orth <ryanorth@workfront.com>
Bug fixes:
- Update to go1.12.8 (#5201 by ldez). HTTP/2 Denial of Service
CVE-2019-9512 and CVE-2019-9514
- [server] Make hijackConnectionTracker.Close thread safe (#5194 by
jlevesy)
- [acme] Update lego (#5166 by dabeck)
- [consulcatalog] warning should not be a fail status (#4537 by
saez0pub)
- [docker] Update docker api version (#4909 by dtomcej)
- [dynamodb] Use dynamodbav tags to override json tags. (#5002 by ldez)
- [healthcheck] Wrr loadbalancer honors old weight on recovered servers
(#5051 by DougWagner)
- [k8s] Check for multiport services on Global Backend Ingress (#5021 by
dtomcej)
- [logs] Allows logs to use local time zone instead of UTC (#4954 by
dduportal)
- [middleware] Clear TLS client headers if TLSMutualAuth is optional
(#4963 by stffabi)
- [tls] Add missing KeyUsages for default generated certificate (#5150
by dtomcej)
Signed-off-by: Raymond Walker <raymond.walker@greenpeace.org>
* feat: imporvements to pachyderm chart (#13054)
* feat: imporvements to pachyderm chart
- De-hardcode suite label to allow deployment in a different namespace
than `pachyderm`
- De-hardcode service account name to allow deployment in a different
namespace than `pachyderm`
- Allow specifying resource limits for `etcd` and `patchd` deployments
- Split `pachd` service in 3 stand alone services to allow exposing
`pachd-grpc-api` through a LoadBalancer service type
- `pachd-grpc-api` port can be customized
- `pachd` deployment now support iam-role annotation for `kube2iam`
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* add variables to support 1.8.x
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* node port fixed to 30650
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* boolean as stringwq
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* fix typo
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
* quote the value in the template instead
Signed-off-by: Maxime Belanger <maxime.b.belanger@gmail.com>
Signed-off-by: Philipp Hellmich <phil@hellmi.de>
* some changes based on feedback of dtomcej
Signed-off-by: Philipp Hellmich <phil@hellmi.de>
* commented out servicemonitor as requested in PR
Signed-off-by: Philipp Hellmich <phil@hellmi.de>
* fix
Signed-off-by: Philipp Hellmich <phil@hellmi.de>
* Adds MTLS support to Traefik chart.
Work previously done by @somcsel and picked up here after abndoned.
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Removed base64 ca cert requirement
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Comment out MTLS by default
- PR feedback to comment out values MTLS settings by default
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* PR feedback, removing typos from values
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Add missing comment blocks
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Bumped chart version to 1.70.0
Signed-off-by: Thomas Miller <thomas@tlm.id.au>
* Bumped chart version to 1.74.0
Signed-off-by: Thomas Miller <thomas@tlm.id.au>