-
Notifications
You must be signed in to change notification settings - Fork 764
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: 💥 support http redirections and http challenges with cert-manager #934
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for your contribution to Traefik helm chart.
It's more common with Traefik to use TLS-ALPN-01 with Traefik ACME provider or DNS challenge of cert-manager.
Having that said, this implementation is too specific for many users.
What do you think about changing
ports:
web:
redirectTo: websecure
to:
ports:
web:
redirectTo:
port: websecure
priority: 10
?
@darkweaver87 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@renebarbosafl For users using dns challenges and this redirect, it will fail unless they set a priority.
=> priority should be an optional settings
Ok @mloiseleur! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Traefik Chart v25.0.0 was released with a breaking change (traefik/traefik-helm-chart#934). This is a quick fix to pin to the old behaviour. Signed-off-by: Malte Muench <[email protected]>
Traefik Chart v25.0.0 was released with a breaking change (traefik/traefik-helm-chart#934). This is a quick fix to pin to the old behaviour. Signed-off-by: Malte Muench <[email protected]>
Traefik Chart v25.0.0 was released with a breaking change (traefik/traefik-helm-chart#934). This is a quick fix to pin to the old behaviour. Signed-off-by: Malte Münch <[email protected]>
traefik/traefik-helm-chart#934 Signed-off-by: Zee Aslam <[email protected]>
What does this PR do?
We found that when using the HTTP redirections feature (to force usage of HTTPS) all cert-manager challenges to issue new certificates are failing, this PR adds a new priority parameter that actually enables Traefik to work with cert-manager even if using HTTP redirections.
This helm chart does not have any tests on enabling this feature either so I added it.
Motivation
The solution was found here:
https://community.traefik.io/t/solved-http-to-https-redirect-ends-in-an-https-url-with-8443-appended/10136/5
(Thanks to matthiasbaldi)
More
make test
and all the tests passed