Skip to content

kubernetes: move to Traefik - #6

Merged
japsu merged 2 commits into
developmentfrom
traefik-migration
Aug 3, 2026
Merged

japsu merged 2 commits into
developmentfrom
traefik-migration

Conversation

@japsu

@japsu japsu commented Aug 3, 2026 •

Copy link
Copy Markdown

NOTE: Let me handle merging – needs to be synced with ingress controller flip

ingressClassName and ssl-redirect move to Traefik - the shared
https-redirect Middleware, attached only when TLS is actually configured
(see infrastructure/kubernetes/traefik-migration-inventory.md for the
overall migration this is part of). kirppu-backup always has TLS
(manually-managed cert) so it gets the middleware unconditionally.

japsu added 2 commits August 3, 2026 13:39
ingressClassName and ssl-redirect move to Traefik - the shared
https-redirect Middleware, attached only when TLS is actually configured
(see infrastructure/kubernetes/traefik-migration-inventory.md for the
overall migration this is part of). kirppu-backup always has TLS
(manually-managed cert) so it gets the middleware unconditionally.
Bumps SHA-pinned actions/checkout, setup-python, docker/setup-buildx-action,
docker/login-action, and actions/cache to their current latest release
SHAs, keeping the existing pin-by-commit-with-version-comment style.

.github/cache-tools/action.yaml: kubectl bumped from v1.20.4 to v1.36.2 to
match the Qb cluster's actual server version (v1.36.2+k3s1), with the
correct sha256 checksum for the new binary. Bumped the bin cache key
generation (bin-v1 -> bin-v2) since the download step is gated on
cache-hit != 'true' and would otherwise keep serving the old cached binary.
@jlaunonen

Copy link
Copy Markdown
Collaborator

lgtm

@japsu
japsu merged commit 76d8b82 into development Aug 3, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants