imfreedom/k8s-cluster

Update to traefik 2.4.13

2021-08-07, Gary Kramlich
df5d3f5f6707
Parents 41ff7f91d3e2
Children 625b46da5bcc
Update to traefik 2.4.13
3 files changed, 72 insertions(+), 41 deletions(-)
  • +59 -30
    20-ingress/crd.yaml
  • +2 -2
    20-ingress/manifest.yaml
  • +11 -9
    20-ingress/rbac.yaml
    • --- a/20-ingress/crd.yaml Sat Aug 07 22:40:49 2021 -0500
    +++ b/20-ingress/crd.yaml Sat Aug 07 23:33:03 2021 -0500
    @@ -3,6 +3,7 @@
    kind: CustomResourceDefinition
    metadata:
    name: ingressroutes.traefik.containo.us
    +
    spec:
    group: traefik.containo.us
    version: v1alpha1
    @@ -11,24 +12,13 @@
    plural: ingressroutes
    singular: ingressroute
    scope: Namespaced
    ----
    -apiVersion: apiextensions.k8s.io/v1beta1
    -kind: CustomResourceDefinition
    -metadata:
    - name: ingressroutetcps.traefik.containo.us
    -spec:
    - group: traefik.containo.us
    - version: v1alpha1
    - names:
    - kind: IngressRouteTCP
    - plural: ingressroutetcps
    - singular: ingressroutetcp
    - scope: Namespaced
    +
    ---
    apiVersion: apiextensions.k8s.io/v1beta1
    kind: CustomResourceDefinition
    metadata:
    name: middlewares.traefik.containo.us
    +
    spec:
    group: traefik.containo.us
    version: v1alpha1
    @@ -37,11 +27,43 @@
    plural: middlewares
    singular: middleware
    scope: Namespaced
    +
    +---
    +apiVersion: apiextensions.k8s.io/v1beta1
    +kind: CustomResourceDefinition
    +metadata:
    + name: ingressroutetcps.traefik.containo.us
    +
    +spec:
    + group: traefik.containo.us
    + version: v1alpha1
    + names:
    + kind: IngressRouteTCP
    + plural: ingressroutetcps
    + singular: ingressroutetcp
    + scope: Namespaced
    +
    +---
    +apiVersion: apiextensions.k8s.io/v1beta1
    +kind: CustomResourceDefinition
    +metadata:
    + name: ingressrouteudps.traefik.containo.us
    +
    +spec:
    + group: traefik.containo.us
    + version: v1alpha1
    + names:
    + kind: IngressRouteUDP
    + plural: ingressrouteudps
    + singular: ingressrouteudp
    + scope: Namespaced
    +
    ---
    apiVersion: apiextensions.k8s.io/v1beta1
    kind: CustomResourceDefinition
    metadata:
    name: tlsoptions.traefik.containo.us
    +
    spec:
    group: traefik.containo.us
    version: v1alpha1
    @@ -50,11 +72,28 @@
    plural: tlsoptions
    singular: tlsoption
    scope: Namespaced
    +
    +---
    +apiVersion: apiextensions.k8s.io/v1beta1
    +kind: CustomResourceDefinition
    +metadata:
    + name: tlsstores.traefik.containo.us
    +
    +spec:
    + group: traefik.containo.us
    + version: v1alpha1
    + names:
    + kind: TLSStore
    + plural: tlsstores
    + singular: tlsstore
    + scope: Namespaced
    +
    ---
    apiVersion: apiextensions.k8s.io/v1beta1
    kind: CustomResourceDefinition
    metadata:
    name: traefikservices.traefik.containo.us
    +
    spec:
    group: traefik.containo.us
    version: v1alpha1
    @@ -63,30 +102,20 @@
    plural: traefikservices
    singular: traefikservice
    scope: Namespaced
    +
    ---
    apiVersion: apiextensions.k8s.io/v1beta1
    kind: CustomResourceDefinition
    metadata:
    - name: tlsstores.traefik.containo.us
    + name: serverstransports.traefik.containo.us
    +
    spec:
    group: traefik.containo.us
    version: v1alpha1
    names:
    - kind: TLSStore
    - plural: tlsstores
    - singular: tlsstore
    + kind: ServersTransport
    + plural: serverstransports
    + singular: serverstransport
    scope: Namespaced
    ---
    -apiVersion: apiextensions.k8s.io/v1beta1
    -kind: CustomResourceDefinition
    -metadata:
    - name: ingressrouteudps.traefik.containo.us
    -spec:
    - group: traefik.containo.us
    - version: v1alpha1
    - names:
    - kind: IngressRouteUDP
    - plural: ingressrouteudps
    - singular: ingressrouteudp
    - scope: Namespaced
    ----
    +
    --- a/20-ingress/manifest.yaml Sat Aug 07 22:40:49 2021 -0500
    +++ b/20-ingress/manifest.yaml Sat Aug 07 23:33:03 2021 -0500
    @@ -61,10 +61,10 @@
    - controller
    topologyKey: failure-domain.beta.kubernetes.io/region
    weight: 100
    - serviceAccountName: traefik-service-account
    + serviceAccountName: traefik-ingress-controller
    containers:
    - name: traefik-ingress-controller
    - image: docker.io/traefik:v2.3.6
    + image: docker.io/traefik:v2.4.13
    args:
    - "--global.checknewversion=false"
    - "--global.sendanonymoususage=false"
    --- a/20-ingress/rbac.yaml Sat Aug 07 22:40:49 2021 -0500
    +++ b/20-ingress/rbac.yaml Sat Aug 07 23:33:03 2021 -0500
    @@ -2,7 +2,7 @@
    apiVersion: v1
    kind: ServiceAccount
    metadata:
    - name: traefik-service-account
    + name: traefik-ingress-controller
    labels:
    app: traefik
    role: controller
    @@ -10,7 +10,8 @@
    kind: ClusterRole
    apiVersion: rbac.authorization.k8s.io/v1beta1
    metadata:
    - name: traefik-cluster-role
    + name: traefik-ingress-controller
    +
    rules:
    - apiGroups:
    - ""
    @@ -48,24 +49,25 @@
    - ingressrouteudps
    - tlsoptions
    - tlsstores
    + - serverstransports
    verbs:
    - get
    - list
    - watch
    +
    ---
    -apiVersion: rbac.authorization.k8s.io/v1
    kind: ClusterRoleBinding
    +apiVersion: rbac.authorization.k8s.io/v1beta1
    metadata:
    - name: traefik-cluster-role-binding
    - labels:
    - app: traefik
    - role: controller
    + name: traefik-ingress-controller
    +
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    - name: traefik-cluster-role
    + name: traefik-ingress-controller
    subjects:
    - kind: ServiceAccount
    - name: traefik-service-account
    + name: traefik-ingress-controller
    namespace: kube-public
    ---
    +