Update from 3.1.4 to 3.1.6, changes for 3.1.5. and 3.1.6
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/traefik?expand=0&rev=53
This commit is contained in:
Git OBS Bridge
commit
f195877329
23
.gitattributes
vendored
Normal file
23
.gitattributes
vendored
Normal file
@ -0,0 +1,23 @@
|
|||||||
|
## Default LFS
|
||||||
|
*.7z filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.bsp filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.bz2 filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.gem filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.gz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.jar filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.lz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.lzma filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.obscpio filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.oxt filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.pdf filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.png filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.rpm filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.tbz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.tbz2 filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.tgz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.ttf filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.txz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.whl filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.xz filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.zip filter=lfs diff=lfs merge=lfs -text
|
||||||
|
*.zst filter=lfs diff=lfs merge=lfs -text
|
||||||
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
|||||||
|
.osc
|
||||||
9
90-traefik.conf
Normal file
9
90-traefik.conf
Normal file
@ -0,0 +1,9 @@
|
|||||||
|
#
|
||||||
|
# Increase the maximum UDP Buffer size to prevent dropping
|
||||||
|
# incoming packaets by the kernel
|
||||||
|
#
|
||||||
|
# https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes
|
||||||
|
#
|
||||||
|
|
||||||
|
net.core.rmem_max=7500000
|
||||||
|
net.core.wmem_max=7500000
|
||||||
8
_service
Normal file
8
_service
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
<services>
|
||||||
|
<service name="download_files" mode="manual">
|
||||||
|
</service>
|
||||||
|
<service name="go_modules" mode="manual">
|
||||||
|
<param name="archive">traefik*.src.tar.gz</param>
|
||||||
|
<param name="basename">./</param>
|
||||||
|
</service>
|
||||||
|
</services>
|
||||||
3
traefik-user.conf
Normal file
3
traefik-user.conf
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
#Type Name ID GECOS Home directory Shell
|
||||||
|
u traefik - "HTTP reverse proxy and load balancer" /etc/traefik -
|
||||||
|
m traefik traefik
|
||||||
3
traefik-v3.0.3.src.tar.gz
Normal file
3
traefik-v3.0.3.src.tar.gz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:4c0ac5053256bcd8d71ab311bae8505f65d802e04f59c44867de2898539de6d7
|
||||||
|
size 11531116
|
||||||
3
traefik-v3.0.4.src.tar.gz
Normal file
3
traefik-v3.0.4.src.tar.gz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:6e9fff2f62ea01592e2530f36a7db6bb14cabd5161543d7b01faf48366a0ada8
|
||||||
|
size 11531035
|
||||||
3
traefik-v3.1.0.src.tar.gz
Normal file
3
traefik-v3.1.0.src.tar.gz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:266091d5c477afd8814bf0a94e07e79044f8e6092b71930b09cfa3046ef67b4e
|
||||||
|
size 11490625
|
||||||
3
traefik-v3.1.2.src.tar.gz
Normal file
3
traefik-v3.1.2.src.tar.gz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:d8cada1d42e2fad4cbe15b75e8db21647b520ffd49dd09814cc1131c3fe02d00
|
||||||
|
size 11491439
|
||||||
3
traefik-v3.1.4.src.tar.gz
Normal file
3
traefik-v3.1.4.src.tar.gz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:ef3c05ff29ff5fa57a14c220c1eff43b2441852d6f2b8f2cc92c7faf39656254
|
||||||
|
size 11498368
|
||||||
3
traefik-v3.1.6.src.tar.gz
Normal file
3
traefik-v3.1.6.src.tar.gz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:88cd6b1f871894bcae5e2c9eb356b13aaea815368b9c68a0ff4a466b6a05d02f
|
||||||
|
size 11485716
|
||||||
605
traefik.changes
Normal file
605
traefik.changes
Normal file
@ -0,0 +1,605 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Oct 16 03:46:25 UTC 2024 - Eric Torres <eric.torres@its-et.me>
|
||||||
|
|
||||||
|
- Update from 3.1.4 to 3.1.6
|
||||||
|
|
||||||
|
- Version 3.1.6 changes
|
||||||
|
- middleware
|
||||||
|
* Reuse compression writers (#11168 by michelheusschen)
|
||||||
|
* Use correct default weight in Accept-Encoding (#11084 by michelheusschen)
|
||||||
|
- plugins
|
||||||
|
* Close wasm middleware to prevent memory leak (#11151 by ttys3)
|
||||||
|
|
||||||
|
- Version 3.1.5 changes
|
||||||
|
- k8s, ingress
|
||||||
|
* Disable IngressClass lookup when disableClusterScopeResources is enabled (#11111 by jnoordsij)
|
||||||
|
- server
|
||||||
|
* Rework condition to not log on timeout (#11132 by rtribotte)
|
||||||
|
- Merge branch v2.11 into v3.1
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Sep 24 00:25:39 UTC 2024 - Eric Torres <eric.torres@its-et.me>
|
||||||
|
|
||||||
|
- Update to version 3.1.4
|
||||||
|
- Fixes CVE-2024-45410, boo#1230842
|
||||||
|
- k8s, ingress, rules, crd
|
||||||
|
* Allow configuring rule syntax with Kubernetes Ingress annotation
|
||||||
|
* Re-allow empty configuration for Kubernetes Ingress provider
|
||||||
|
* Remove mentions about APIVersion traefik.io/v1
|
||||||
|
* Update quick-start-with-kubernetes.md to include required permissions
|
||||||
|
- middlewares, metrics
|
||||||
|
* Wrap capture for services used by pieces of middleware
|
||||||
|
* Mention missing metrics removal in the migration guide
|
||||||
|
* Guess Datadog socket type when prefix is unix
|
||||||
|
- plugins
|
||||||
|
* Removes goexport dependency and adds _initialize
|
||||||
|
- tracing
|
||||||
|
* Fix tracing documentation
|
||||||
|
* OTLP doc + potential panic
|
||||||
|
|
||||||
|
- Update ldflags to point to correct traefik version (v3 instead of v2)
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu Sep 12 14:50:28 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Moved /etc/traefik/acme.json to /var/lib/traefik/acme.json to allow traefik
|
||||||
|
running with "ProtectSystem=full" write access to the certificate store.
|
||||||
|
|
||||||
|
The acme.json file will be automatically moved and the configuration will be
|
||||||
|
updated accordingly.
|
||||||
|
|
||||||
|
- Added /usr/lib/sysctl.d/90-itraefik.conf to increase UDP Buffer sizes as explained
|
||||||
|
at https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Aug 7 08:03:10 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Fixed service-file: set working directory, so that the /etc/traefik/acme.json
|
||||||
|
file can be written in /etc/traefik/acme.json
|
||||||
|
|
||||||
|
- Update to version 3.1.1
|
||||||
|
- Bug fixes:
|
||||||
|
* grpc: Bump google.golang.org/grpc to v1.64.1
|
||||||
|
* k8s/gatewayapi: Do not update route status when nothing changed
|
||||||
|
* metrics
|
||||||
|
- Fix grafana dashboard to work with scrape interval greater than 15s
|
||||||
|
- Update open connections gauge with connections count
|
||||||
|
- Use ServiceName in traefik_service_server_up metric
|
||||||
|
* docker: Update to github.com/docker/docker v27.1.1
|
||||||
|
* webui: Upgrade webui dependencies - fixes boo#1224308 and CVE-2024-4068
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Jul 31 16:47:51 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Run traefik as traefik user, fixes boo#1227226
|
||||||
|
- Added ACME confiuration template
|
||||||
|
|
||||||
|
- Update to version 3.1.1
|
||||||
|
- Bug fixes:
|
||||||
|
* k8s/gatewayapi
|
||||||
|
- Do not update route status when nothing changed
|
||||||
|
* metrics
|
||||||
|
- Fix grafana dashboard to work with scrape interval greater than 15s
|
||||||
|
- Update open connections gauge with connections count
|
||||||
|
- Use ServiceName in traefik_service_server_up metric
|
||||||
|
- Updates
|
||||||
|
|
||||||
|
- Fix for CVE-2024-6104, boo#1227059
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon Jul 15 17:22:18 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
Important: Please read the migration guide
|
||||||
|
https://doc.traefik.io/traefik/v3.1/migration/v3/#v30-to-v31
|
||||||
|
|
||||||
|
- Update to version 3.1.0
|
||||||
|
- enhancements:
|
||||||
|
* k8s/crd,k8s
|
||||||
|
- Support HealthCheck for ExternalName services
|
||||||
|
* k8s/ingress,k8s/crd,k8s
|
||||||
|
- Allow to use internal Node IPs for NodePort services
|
||||||
|
- Change log level from Warning to Info when ExternalName services
|
||||||
|
is enabled
|
||||||
|
* k8s/ingress,k8s/crd,k8s,k8s/gatewayapi
|
||||||
|
- Migrate to EndpointSlices API
|
||||||
|
* k8s,k8s/gatewayapi
|
||||||
|
- Bump Gateway API to v1.1.0
|
||||||
|
- Compute HTTPRoute priorities
|
||||||
|
- Fix route attachments to gateways
|
||||||
|
- KubernetesGateway provider is no longer experimental
|
||||||
|
- Set Gateway HTTPRoute status
|
||||||
|
- Support HTTPRoute method and query param matching
|
||||||
|
- Support HTTPURLRewrite filter
|
||||||
|
- Support invalid HTTPRoute status
|
||||||
|
- Support ReferenceGrant for HTTPRoute backends
|
||||||
|
- Support RegularExpression for path matching
|
||||||
|
* middleware
|
||||||
|
- Add support for Zstandard to the compression middleware
|
||||||
|
* middleware,k8s,k8s/gatewayapi
|
||||||
|
- Improve HTTPRoute Redirect Filter with port and scheme
|
||||||
|
- Support HTTPRoute redirect port and scheme
|
||||||
|
* middleware
|
||||||
|
- Support Content-Security-Policy-Report-Only in the headers middleware
|
||||||
|
* plugins
|
||||||
|
- Add logs for plugins load
|
||||||
|
- Enhance wasm plugins
|
||||||
|
* server
|
||||||
|
- Support systemd socket-activation
|
||||||
|
- Bug fixes:
|
||||||
|
* healthcheck,k8s/crd,k8s
|
||||||
|
- Fix Healthcheck default value for ExternalName services
|
||||||
|
* k8s,k8s/gatewayapi
|
||||||
|
- Do not disable Gateway API provider if not enabled in experimental
|
||||||
|
- Retry on Gateway API resource status update
|
||||||
|
* middleware,metrics,tracing
|
||||||
|
- Upgrade to OpenTelemetry Semantic Conventions v1.26.0
|
||||||
|
* otel
|
||||||
|
- Bump opentelemetry-go to v1.28
|
||||||
|
* plugins
|
||||||
|
- Fix build only linux and darwin support wazergo
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu Jul 4 08:50:50 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Update to version 3.0.4
|
||||||
|
* Bug fixes:
|
||||||
|
- Fix for CVE-2024-39321 bsc#1227515
|
||||||
|
- [ecs] Fix ECS config for OIDC + IRSA (gh#traefik/traefik#10814 by mmatur)
|
||||||
|
- [http3] Disable QUIC 0-RTT (gh#traefik/traefik#10867 by mmatur)
|
||||||
|
- [middleware,server] Remove interface names from IPv6 (gh#traefik/traefik#10813 by JeroenED)
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Jun 19 15:45:49 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Update to version 3.0.3
|
||||||
|
* Updated libraries
|
||||||
|
|
||||||
|
- Update to version 3.0.2
|
||||||
|
* Bug fixes:
|
||||||
|
[logs] Bump OTel dependencies (#10763 by DrFaust92)
|
||||||
|
[logs] Append to log file if it exists (#10756 by lbenguigui)
|
||||||
|
[metrics] Fix service name label_replace in Grafana (#10758 by xdavidwu)
|
||||||
|
[middleware] Forward the correct status code when compression is disabled within the Brotli handler (#10780 by rtribotte)
|
||||||
|
[middleware] Support Accept-Encoding header weights with Compress middleware (#10777 by ldez)
|
||||||
|
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed May 29 08:20:42 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Fix in traefik.yml configuration file
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu May 23 15:02:13 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Update to version 3.0.1
|
||||||
|
* CVEs:
|
||||||
|
* CVE-2024-24788 (bsc#1224018): A malformed DNS message in response to a
|
||||||
|
query can cause the Lookup functions to get stuck in an infinite loop.
|
||||||
|
* Bug fixes:
|
||||||
|
* [k8s/ingress] Fix rule syntax version for all internal routers
|
||||||
|
(gh#traefik/traefik#10689 by HalloTschuess)
|
||||||
|
* [metrics,tracing] Allow empty configuration for OpenTelemetry metrics
|
||||||
|
and tracing (gh#traefik/traefik#10729 by rtribotte)
|
||||||
|
* [provider,tls] Bump tscert dependency to 28a91b69a046
|
||||||
|
(gh#traefik/traefik#10668 by kevinpollet)
|
||||||
|
* [rules,tcp] Fix the rule syntax mechanism for TCP
|
||||||
|
(gh#traefik/traefik#10680 by lbenguigui)
|
||||||
|
* [tls,server] Remove deadlines when handling PostgreSQL connections
|
||||||
|
(gh#traefik/traefik#10675 by rtribotte)
|
||||||
|
* [webui] Add support for IP White list
|
||||||
|
(gh#traefik/traefik#10740 by davidbaptista)
|
||||||
|
|
||||||
|
- Packaging:
|
||||||
|
* Use Traefik's src.tar.gz files containing a pre-built frontend to simplify the packaging process
|
||||||
|
* Fixes bsc#1224308 and bsc#1224384
|
||||||
|
|
||||||
|
- Removed allow-node-21.patch and prepare-sources.sh script
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon May 6 12:59:25 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Moved configuraton from .toml to .yml config
|
||||||
|
|
||||||
|
- Update to version 3.0.0
|
||||||
|
* Announcment: https://traefik.io/blog/announcing-traefik-proxy-v3-rc/
|
||||||
|
* added support for popular, emerging technologies—WebAssembly (Wasm),
|
||||||
|
OpenTelemetry, and Kubernetes Gateway API
|
||||||
|
* revamped some key parts of the routing rules
|
||||||
|
* added support for some leading edge technologies like HTTP/3, SPIFFE, and Tailscale
|
||||||
|
|
||||||
|
* Migration guide: https://doc.traefik.io/traefik/v3.0/migration/v2-to-v3/
|
||||||
|
|
||||||
|
* Details: https://github.com/traefik/traefik/releases/tag/v3.0.0
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Fri May 3 15:14:17 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Added allow-node-21.patch to allow building with nodejs21, too
|
||||||
|
- Removed traefik-fix-int-overflow-with-go-generate-10452.patch
|
||||||
|
|
||||||
|
- Update to version 2.11.2
|
||||||
|
* Important
|
||||||
|
* Read the migration guide at https://doc.traefik.io/traefik/migration/v2/#v2112
|
||||||
|
|
||||||
|
* CVEs:
|
||||||
|
* GHSA-7f4j-64p6-5h5v (related to CVE-2023-45288)
|
||||||
|
* CVE-2024-28869 (bsc#1222825)
|
||||||
|
|
||||||
|
* Bug fixes:
|
||||||
|
* [server] Revert LingeringTimeout and change default value for ReadTimeout
|
||||||
|
* [server] Set default ReadTimeout value to 60s
|
||||||
|
|
||||||
|
- Update to version 2.11.1:
|
||||||
|
* Bug fixes:
|
||||||
|
* [acme,tls] Enforce handling of ACME-TLS/1 challenges
|
||||||
|
* [acme] Update go-acme/lego to v4.16.1
|
||||||
|
* [acme] Close created file in ACME local store CheckFile func
|
||||||
|
* [docker,http3] Update to quic-go v0.42.0 and docker/cli v24.0.9
|
||||||
|
* [docker,marathon,rancher,ecs,tls,nomad] Allow to configure TLSStore default generated certificate with labels
|
||||||
|
* [ecs] Adjust ECS network interface detection logi
|
||||||
|
* [logs,tls] Fix log when default TLSStore and TLSOptions are defined multiple times
|
||||||
|
* [middleware] Allow empty replacement with ReplacePathRegex middleware
|
||||||
|
* [plugins] Update Yaegi to v0.16.1
|
||||||
|
* [provider,rules] Don't allow routers higher than internal ones
|
||||||
|
* [rules] Reserve priority range for internal router
|
||||||
|
* [server,tcp] Introduce Lingering Timeout
|
||||||
|
* [tcp] Enforce failure for TCP HostSNI with hostname
|
||||||
|
* [tracing] Bump Elastic APM to v2.4.8
|
||||||
|
* [webui] Fix dashboard exposition through a router
|
||||||
|
* [webui] Display IPAllowlist middleware configuration in dashboard
|
||||||
|
* [webui] Make text more readable in dark mode
|
||||||
|
* [webui] Migrate to Quasar 2.x and Vue.js 3.x
|
||||||
|
* [webui] Add a horizontal scroll for the mobile view
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Mar 6 11:13:51 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Remove node_modules.sums left over by obs-service-node_modules
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Mar 5 10:54:13 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- configuration changes:
|
||||||
|
* Enhanced default configuration file, including configs for http3 support.
|
||||||
|
* Docker configuration has been disabled per default, file provider has been enabled.
|
||||||
|
The directory for the file provider has been set to /etc/traefik/conf.d
|
||||||
|
* Prepared directories for logging in /var/log/traefik
|
||||||
|
* Enhanced default configuration file, including configs for http3 support. Settings
|
||||||
|
are disabled per default.
|
||||||
|
|
||||||
|
- packaging general:
|
||||||
|
* Use standard source-download feature, modified _service file and removed _servicedata
|
||||||
|
* packagers can invoke `prepare-sources.sh` to doenload sources and prepare go-packages
|
||||||
|
as well as node_modules for the built process.
|
||||||
|
|
||||||
|
- frontend packaging:
|
||||||
|
* The frontend will now be packaged on OBS to have reproduceable builds.
|
||||||
|
|
||||||
|
- Go packaging:
|
||||||
|
* Added upstream patch traefik-fix-int-overflow-with-go-generate-10452.patch to
|
||||||
|
allow packaging on 32bit architectures gh#traefik/traefik#10451
|
||||||
|
* Enabled CGO because there is no cross compilation needed in OSB (we build
|
||||||
|
packages for every distribution/architecture seperately). PIE can not be used
|
||||||
|
with CGO enabled for most architectures and is reported as failure sinc go 1.22.
|
||||||
|
See https://github.com/golang/go/issues/64875
|
||||||
|
* Don't use pie-buildmode for ppc64 and s390x architectures
|
||||||
|
|
||||||
|
- Update to version 2.11.0:
|
||||||
|
* Enhancements:
|
||||||
|
* [middleware] Deprecate IPWhiteList middleware in favor of IPAllowList
|
||||||
|
* [redis] Add Redis Sentinel support
|
||||||
|
* [server] Add KeepAliveMaxTime and KeepAliveMaxRequests features to entrypoints
|
||||||
|
* [sticky-session] Hash WRR sticky cookies
|
||||||
|
* Bug fixes:
|
||||||
|
* [acme] Update go-acme/lego to v4.15.0
|
||||||
|
* [authentication] Fix NTLM and Kerberos
|
||||||
|
* [file] Fix file watcher
|
||||||
|
* [file] Update github.com/fsnotify/fsnotify to v1.7.0
|
||||||
|
* [http3] Update quic-go to v0.40.1
|
||||||
|
* [middleware,tcp] Add missing TCP IPAllowList middleware constructor
|
||||||
|
* [nomad] Update the Nomad API dependency to v1.7.2
|
||||||
|
* [server] Fix ReadHeaderTimeout for PROXY protocol
|
||||||
|
* [webui] Fixes the Header Button
|
||||||
|
* [webui] Fix URL encode resource's id before calling API endpoints
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Feb 21 14:21:09 UTC 2024 - Johannes Weberhofer <jweberhofer@weberhofer.at>
|
||||||
|
|
||||||
|
- Fixed packaging of UI
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Fri Dec 08 12:51:12 UTC 2023 - alexandre.vicenzi@suse.com
|
||||||
|
|
||||||
|
- Update to version 2.10.7:
|
||||||
|
* CVEs:
|
||||||
|
* CVE-2023-45283 (boo#1216943)
|
||||||
|
* CVE-2023-45284 (boo#1216944)
|
||||||
|
* CVE-2023-47124 (boo#1217806)
|
||||||
|
* CVE-2023-47633 (boo#1217807)
|
||||||
|
* CVE-2023-47106 (boo#1217804)
|
||||||
|
* GHSA-7v4p-328v-8v5g, CVE-2023-39325 (boo#1216109)
|
||||||
|
* Bug fixes:
|
||||||
|
* [accesslogs] Fix preflight response status in access logs
|
||||||
|
* [accesslogs] Move origin fields capture to service level
|
||||||
|
* [acme] Do not check for wildcard domains for non DNS challenge
|
||||||
|
* [acme] Remove backoff for http challenge (CVE-2023-47124)
|
||||||
|
* [acme] Update go-acme/lego to v4.14.0
|
||||||
|
* [consul,consulcatalog] Update github.com/hashicorp/consul/api
|
||||||
|
* [http3] Update quic-go to v0.39.1
|
||||||
|
* [k8s/crd] Fix multiple subsets endpoint
|
||||||
|
* [k8s/ingress,k8s/crd,k8s,hub] Clean code related to Hub
|
||||||
|
* [k8s/ingress,k8s] fix: avoid panic on resource backends
|
||||||
|
* [kv] Ignore ErrKeyNotFound error for the KV provider
|
||||||
|
* [logs] Fixed datadog logs json format issue
|
||||||
|
* [metrics] Enable Prometheus provider cleanup when only the router's metrics level is activated
|
||||||
|
* [middleware,authentication] Adjust forward auth to avoid connection leak
|
||||||
|
* [middleware,server] Improve CNAME flattening to avoid unnecessary error logging
|
||||||
|
* [middleware,tracing,plugins] fix: traceability of the middleware plugins
|
||||||
|
* [middleware] Allow X-Forwarded-For delete operation
|
||||||
|
* [middleware] Encode query semicolons
|
||||||
|
* [middleware] Fix stripPrefix middleware is not applied to retried attempts
|
||||||
|
* [middleware] Missing trailer with custom errors middleware
|
||||||
|
* [middleware] Support informational headers in middlewares redefining the response writer
|
||||||
|
* [plugins] Improve error messages related to plugins
|
||||||
|
* [provider] Refuse recursive requests (CVE-2023-47633)
|
||||||
|
* [server] Deny request with fragment in URL path (CVE-2023-47106)
|
||||||
|
* [server] Update x/net and grpc/grpc-go
|
||||||
|
* [tracing] Remove deprecated code usage for datadog tracer
|
||||||
|
* [tracing] Update DataDog tracing dependency to v1.50.1
|
||||||
|
* [webui] Add missing accessControlAllowOriginListRegex to middleware view
|
||||||
|
* Fix false positive in url anonymization
|
||||||
|
* Misc:
|
||||||
|
* [webui] Updates the Hub tooltip content using a web component and adds an option to disable Hub button
|
||||||
|
- Update Go version (CVE-2023-45283, CVE-2023-45284, CVE-2023-39325)
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon Jun 12 17:26:46 UTC 2023 - alexandre.vicenzi@suse.com
|
||||||
|
|
||||||
|
- Update to version 2.10.1:
|
||||||
|
* CVEs
|
||||||
|
* CVE-2022-41724 (bsc#1208271)
|
||||||
|
* CVE-2023-24534 (bsc#1210127)
|
||||||
|
* CVE-2023-29013 (bsc#1210505)
|
||||||
|
* Enhancements
|
||||||
|
* [docker] Expose ContainerName in Docker provider
|
||||||
|
* [hub] Remove hub configuration out of experimental
|
||||||
|
* [k8s/crd] Introduce traefik.io API Group CRDs
|
||||||
|
* [k8s/ingress,k8s/crd,k8s] Native Kubernetes service load-balancing
|
||||||
|
* [middleware,metrics] Add prometheus metric requests_total with headers
|
||||||
|
* [nomad] Support multiple namespaces in the Nomad Provider
|
||||||
|
* [tracing] Add support to send DataDog traces via Unix Socket
|
||||||
|
* [webui] Display period setting of the RateLimit middleware in the webui
|
||||||
|
* [webui] Modify the Hub Button
|
||||||
|
* Bug fixes
|
||||||
|
* [docker] Expose ContainerName in Docker provider
|
||||||
|
* [docker] Only warn about missing docker network when network_mode is not host or container
|
||||||
|
* [ecs] Prevent panicking when a container has no network interfaces
|
||||||
|
* [file] Make file provider more resilient wrt first configuration
|
||||||
|
* [hub] hub: get out of experimental.
|
||||||
|
* [k8s/crd] Introduce traefik.io API Group CRDs
|
||||||
|
* [k8s/ingress,k8s/crd,k8s] Native Kubernetes service load-balancing
|
||||||
|
* [logs] Differentiate UDP stream and TCP connection in logs
|
||||||
|
* [metrics] Include user-defined default cert for traefik_tls_certs_not_after metric
|
||||||
|
* [middleware,metrics] Add prometheus metric requests_total with headers
|
||||||
|
* [middleware] Prevent from no rate limiting when average is zero
|
||||||
|
* [middleware] Prevents superfluous WriteHeader call in the error middleware
|
||||||
|
* [middleware] Sanitize X-Forwarded-Proto header in RedirectScheme middleware
|
||||||
|
* [nomad] Fix default configuration settings for Nomad Provider
|
||||||
|
* [nomad] Fix Nomad client TLS defaults
|
||||||
|
* [nomad] Support multiple namespaces in the Nomad Provider
|
||||||
|
* [plugins] Improve DeepCopy of PluginConf
|
||||||
|
* [server] Remove User-Agent header removal from ReverseProxy director func
|
||||||
|
* [tls,tcp] Adds the support for IPv6 in the TCP HostSNI matcher
|
||||||
|
* [tracing] Add support to send DataDog traces via Unix Socket
|
||||||
|
* [server] Update golang.org/x/net to v0.7.0 (CVE-2022-41724)
|
||||||
|
- Update Go version (CVE-2023-24534, CVE-2023-29013)
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Jan 17 09:48:46 UTC 2023 - alexandre.vicenzi@suse.com
|
||||||
|
|
||||||
|
- Update to version 2.9.6:
|
||||||
|
* CVEs
|
||||||
|
* CVE-2022-23469
|
||||||
|
* CVE-2022-46153
|
||||||
|
* CVE-2022-41717
|
||||||
|
* Bug fixes
|
||||||
|
* [acme] Update go-acme/lego to v4.9.1
|
||||||
|
* [k8s/crd] Support of allowEmptyServices in TraefikService
|
||||||
|
* [logs] Remove logs of the request
|
||||||
|
* [plugins] Increase the timeout on plugin download
|
||||||
|
* [server] Update golang.org/x/net (CVE-2022-41717, bsc#1207208)
|
||||||
|
* [tls] Handle broken TLS conf better
|
||||||
|
* [tracing] Update DataDog tracing dependency to v1.43.1
|
||||||
|
* [webui] Add missing serialNumber passTLSClientCert option to middleware panel
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Mon Nov 28 12:10:58 UTC 2022 - alexandre.vicenzi@suse.com
|
||||||
|
|
||||||
|
- Update to version 2.9.5:
|
||||||
|
* Enhancements
|
||||||
|
* [acme,tls] ACME Default Certificate
|
||||||
|
* [consul,etcd,zk,kv,redis] Update valkeyrie to v1.0.0
|
||||||
|
* [consulcatalog,nomad] Support Nomad canary deployment
|
||||||
|
* [consulcatalog] Move consulcatalog provider to only use health apis
|
||||||
|
* [docker] Add support for reaching containers using host networking on Podman
|
||||||
|
* [docker] Use IPv6 address
|
||||||
|
* [docker] Add allowEmptyServices for Docker provider
|
||||||
|
* [ecs] Add support for ECS Anywhere
|
||||||
|
* [healthcheck] Add a method option to the service Health Check
|
||||||
|
* [http3] Upgrade quic-go to v0.28.0
|
||||||
|
* [http] Start polling HTTP provider at the beginning
|
||||||
|
* [k8s/crd,plugins] Load plugin configuration field value from Kubernetes Secret
|
||||||
|
* [logs,tcp] Quiet down TCP RST packet error on read operation
|
||||||
|
* [metrics] Add traffic size metrics
|
||||||
|
* [middleware,pilot] Remove Pilot support
|
||||||
|
* [rules,tcp] Support ALPN for TCP + TLS routers
|
||||||
|
* [tcp,service,udp] Make the loadbalancers servers order random
|
||||||
|
* [tls] Change default TLS options for more security
|
||||||
|
* [tracing] Add Datadog GlobalTags support
|
||||||
|
* Bug fixes
|
||||||
|
* [logs,middleware] Create a new capture instance for each incoming request
|
||||||
|
* [acme] Update go-acme/lego to v4.9.0
|
||||||
|
* [kv,redis] Fix Redis configuration type
|
||||||
|
* [logs,middleware,metrics] Handle capture on redefined http.responseWriters
|
||||||
|
* [middleware,k8s] Remove raw cert escape in PassTLSClientCert middleware
|
||||||
|
* [plugins] Update Yaegi to v0.14.3
|
||||||
|
* Remove side effect on default transport tests
|
||||||
|
* [acme] Fix ACME panic
|
||||||
|
* [server] Update golang.org/x/net to latest version
|
||||||
|
* [consulcatalog] Fix UDP loadbalancer tags not being used with Consul Catalog
|
||||||
|
* [docker,rancher,ecs,provider] Simplify AddServer algorithm
|
||||||
|
* [plugins] Allow empty plugin configuration
|
||||||
|
* [rules] Fix query parameter matching with equal
|
||||||
|
* [server] Optimize websocket headers handling
|
||||||
|
* [plugins] Update Yaegi to v0.14.2
|
||||||
|
* [server] Fix IPv6 addr with square brackets
|
||||||
|
* [webui,api] Display default TLS options in the dashboard
|
||||||
|
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Sep 07 10:11:41 UTC 2022 - alexandre.vicenzi@suse.com
|
||||||
|
|
||||||
|
- Update to version 2.8.4:
|
||||||
|
* Enhancements
|
||||||
|
* [consul,consulcatalog] Support multiple namespaces for Consul and ConsulCatalog providers
|
||||||
|
* [logs] Add destination address to debug log
|
||||||
|
* [middleware,provider,tls] Deprecate caOptional option in client TLS configuration
|
||||||
|
* [middleware] Support URL replacement in errors middleware
|
||||||
|
* [middleware] Allow config of additional CircuitBreaker params
|
||||||
|
* [provider] Implement Traefik provider for Nomad orchestrator
|
||||||
|
* [server] Allow HTTP/2 max concurrent stream configuration
|
||||||
|
* [tls,k8s/crd] Support certificates configuration in TLSStore CRD
|
||||||
|
* [webui,pilot,hub] Add Traefik Hub button and deprecate Pilot
|
||||||
|
* [webui,plugins] Reach the catalog of plugins from the Traefik dashboard
|
||||||
|
* Bug fixes
|
||||||
|
* [docker,docker/swarm] Fix Docker provider mem leak on operation retries
|
||||||
|
* [middleware] Fix retry middleware on panic
|
||||||
|
* [plugins] Allow Traefik starting even if plugin service is unavailable
|
||||||
|
* [marathon] Add missing context in backoff for Marathon
|
||||||
|
* [k8s/ingress,k8s] Place namespace before name in router key for Ingress
|
||||||
|
* [logs,middleware,tracing] Remove request dump from IPWhitelist debug log and tracing message
|
||||||
|
* [metrics] Control allocation and copy of labelNamesValues type
|
||||||
|
* [metrics] Fix service up gauge for Prometheus metrics
|
||||||
|
* [yaml] Add missing inline tag for YAML serialization
|
||||||
|
* [middleware,metrics] Improve performances when Prometheus metrics are enabled
|
||||||
|
* [middleware] Support forwarded websocket protocol in RedirectScheme
|
||||||
|
* [nomad] Use configured token in the Nomad client
|
||||||
|
* [metrics] Ensure Datadog client is cleanly stopped
|
||||||
|
* [healthcheck,service] Do not make multiple requests to the same URL for balancer healthcheck
|
||||||
|
* [healthcheck,service] Add log when missing path in health check
|
||||||
|
* [k8s/gatewayapi] Allow multiple listeners on same port in Gateway API provider
|
||||||
|
* [middleware] RedirectScheme redirects based on X-Forwarded-Proto header
|
||||||
|
* [rules] Fix HostRegexp and Query muxers
|
||||||
|
* [logs] Fix invalid placeholder in log message
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Jun 07 08:27:42 UTC 2022 - alexandre.vicenzi@suse.com
|
||||||
|
|
||||||
|
- Update to version 2.7.0:
|
||||||
|
* Enhancements
|
||||||
|
* [consulcatalog] Watch for Consul events to rebuild the dynamic configuration
|
||||||
|
* [healthcheck] Add Failover service
|
||||||
|
* [http3] Configure advertised port using h3 server option
|
||||||
|
* [hub] Add Traefik Hub Integration
|
||||||
|
* [k8s/crd,k8s] Allow empty services in Kubernetes CRD
|
||||||
|
* [metrics] Support InfluxDB v2 metrics backend
|
||||||
|
* [plugins] Remove Pilot token setup constraint to use plugins
|
||||||
|
* [provider] Refactor configuration reload/throttling
|
||||||
|
* [rules,tcp] Add HostSNIRegexp rule matcher for TCP
|
||||||
|
* [tcp] Add muxer for TCP Routers
|
||||||
|
* [webui,pilot] Add Traefik Hub access and remove Pilot access
|
||||||
|
* [webui] Add a link to service on router detail view
|
||||||
|
* Bug fixes
|
||||||
|
* [hub] Skip Provide when TLS is nil
|
||||||
|
* [tcp] Fix TCP-TLS/HTTPS routing precedence
|
||||||
|
* [webui,hub] Use dedicated entrypoint for the tunnels
|
||||||
|
* [logs,k8s/crd] Fix log statement for ExternalName misconfig
|
||||||
|
* [tcp,service] Fix initial tcp lookup when address is not available
|
||||||
|
* [tls] Fix panic when getting certificates with non-existing store
|
||||||
|
* [acme] Fix RenewInterval computation in ACME provider
|
||||||
|
* [ecs,logs] Remove duplicate error logs
|
||||||
|
* [ecs] Filter out ECS anywhere instance IDs
|
||||||
|
* [middleware] Re-add missing writeheader call in flush
|
||||||
|
* [middleware] Fix bug for when custom page is large enough
|
||||||
|
* [middleware] Fix regexp handling in redirect middleware
|
||||||
|
* [plugins] Fix slice parsing for plugins
|
||||||
|
* [tls] Return TLS unrecognized_name error when no certificate is available
|
||||||
|
* [acme] Add domain to HTTP challenge errors
|
||||||
|
* [metrics] Fix metrics bucket key high cardinality
|
||||||
|
* [middleware,tls] Use CNAME for SNI check on host header
|
||||||
|
* [middleware,tracing] Rename Datadog span tags
|
||||||
|
* [tls] Apply the same approach as the rules system on the TLS configuration choice
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Fri Feb 04 13:37:58 UTC 2022 - alexandre.vicenzi@suse.com
|
||||||
|
|
||||||
|
- Update to version 2.6.0:
|
||||||
|
* Updated Kubernetes Gateway API provider
|
||||||
|
* Consul Enterprise support
|
||||||
|
* Consul Connect support
|
||||||
|
* Inflight request middleware for TCP routers
|
||||||
|
* HTTP/3 support (experimental)
|
||||||
|
* Added support for loading plugins directly from the filesystem (Local Plugins)
|
||||||
|
* Added ability to create Provider Plugins
|
||||||
|
* Added TCP Middleware
|
||||||
|
* Kubernetes 1.22 API changes
|
||||||
|
* Dropped support for Ingress API versions extensions/v1beta1
|
||||||
|
* Updated Traefik Proxy CRDs to use API apiextensions.k8s.io/v1
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Jul 28 15:46:39 UTC 2021 - alexandre.vicenzi@suse.com
|
||||||
|
|
||||||
|
- Update to version 2.4.12:
|
||||||
|
* Get Kubernetes server version early
|
||||||
|
* Don't remove ingress config on API call failure
|
||||||
|
* Ratelimiter: use correct ttlSeconds value, and always call Set
|
||||||
|
* Check if defaultcertificate is defined in store
|
||||||
|
* Disable ExternalName Services by default on Kubernetes providers
|
||||||
|
* Fix: malformed Kubernetes resource names and references in tests
|
||||||
|
* Disable Cross-Namespace by default for IngressRoute provider
|
||||||
|
* Accesslog: support multiple values for a given header
|
||||||
|
* Ignore http 1.0 request host missing errors
|
||||||
|
* Headers Middleware: support http.CloseNotifier interface
|
||||||
|
* Detect certificates content modifications
|
||||||
|
* Update go-acme/lego to v4.4.0
|
||||||
|
* Fix: ACME preferred chain.
|
||||||
|
* Remove error when HTTProutes is empty
|
||||||
|
* Fix incorrect behaviour with multi-port endpoint subsets
|
||||||
|
* Kubernetes ingress provider to search via all endpoints
|
||||||
|
* Fix plugin unzip call on windows
|
||||||
|
* Update Yaegi to v0.9.17
|
||||||
|
* Bump paerser to v0.1.4
|
||||||
|
* Create buffered signals channel
|
||||||
|
* Fix: use defaultEntryPoints when no entryPoint is defined in a TCPRouter
|
||||||
|
* Use a dynamic buffer to handle client Hello SNI detection
|
||||||
|
* Error span on 5xx only
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed May 19 09:06:54 UTC 2021 - Bernhard Wiedemann <bwiedemann@suse.com>
|
||||||
|
|
||||||
|
- Allow to override build date with SOURCE_DATE_EPOCH
|
||||||
|
in order to make builds reproducible (boo#1047218)
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu Apr 29 10:07:36 UTC 2021 - alexandre.vicenzi@suse.com
|
||||||
|
|
||||||
|
- Update to version 2.4.8:
|
||||||
|
* Prepare release v2.4.8
|
||||||
|
* Raise errors for non-ASCII domain names in a router's rules
|
||||||
|
* Adding an option to (de)activate Pilot integration into the Traefik dashboard
|
||||||
|
* Doc: improve basic auth middleware httpasswd example
|
||||||
|
* Add missing `traefik.` prefix across sample config
|
||||||
|
* Fix travis docker image pulling for docs
|
||||||
|
* updating docs to remove a no longer needed note
|
||||||
|
* Update to gateway-api v0.2.0
|
||||||
|
* server: updating go-proxyproto with security bugfix from upstream
|
||||||
|
* Update go-acme/lego to v4.3.1
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu Jan 10 14:50:22 UTC 2019 - pgeorgiadis@suse.com
|
||||||
|
|
||||||
|
- Initial package release to version 1.7.7:
|
||||||
|
* Check for watched namespace before getting kubernetes objects
|
||||||
|
* Allow empty path with App-root annotation
|
||||||
|
* kubernetes: sort and uniq TLS secrets
|
||||||
|
* Skip TLS section with no secret in Kubernetes ingress
|
||||||
22
traefik.service
Normal file
22
traefik.service
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
[Unit]
|
||||||
|
Description=Traefik
|
||||||
|
Documentation=https://doc.traefik.io/traefik/
|
||||||
|
After=network.target network-online.target
|
||||||
|
Requires=network-online.target
|
||||||
|
AssertFileIsExecutable=/usr/bin/traefik
|
||||||
|
AssertPathExists=/etc/traefik/traefik.yml
|
||||||
|
|
||||||
|
[Service]
|
||||||
|
Type=notify
|
||||||
|
ExecStart=/usr/bin/traefik --configFile=/etc/traefik/traefik.yml
|
||||||
|
User=traefik
|
||||||
|
WorkingDirectory=~
|
||||||
|
Restart=always
|
||||||
|
WatchdogSec=1s
|
||||||
|
PrivateTmp=true
|
||||||
|
ProtectSystem=full
|
||||||
|
AmbientCapabilities=CAP_NET_BIND_SERVICE
|
||||||
|
KillMode=mixed
|
||||||
|
|
||||||
|
[Install]
|
||||||
|
WantedBy=multi-user.target
|
||||||
168
traefik.spec
Normal file
168
traefik.spec
Normal file
@ -0,0 +1,168 @@
|
|||||||
|
#
|
||||||
|
# spec file for package traefik
|
||||||
|
#
|
||||||
|
# Copyright (c) 2024 SUSE LLC
|
||||||
|
#
|
||||||
|
# All modifications and additions to the file contributed by third parties
|
||||||
|
# remain the property of their copyright owners, unless otherwise agreed
|
||||||
|
# upon. The license for this file, and modifications and additions to the
|
||||||
|
# file, is the same license as for the pristine package itself (unless the
|
||||||
|
# license for the pristine package is not an Open Source License, in which
|
||||||
|
# case the license is the MIT License). An "Open Source License" is a
|
||||||
|
# license that conforms to the Open Source Definition (Version 1.9)
|
||||||
|
# published by the Open Source Initiative.
|
||||||
|
|
||||||
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
||||||
|
#
|
||||||
|
|
||||||
|
|
||||||
|
%define project github.com/traefik/traefik
|
||||||
|
%ifarch ppc64 s390x
|
||||||
|
%define buildmode default
|
||||||
|
%else
|
||||||
|
%define buildmode pie
|
||||||
|
%endif
|
||||||
|
Name: traefik
|
||||||
|
Version: 3.1.6
|
||||||
|
Release: 0
|
||||||
|
Summary: The Cloud Native Application Proxy
|
||||||
|
License: MIT
|
||||||
|
Group: Productivity/Networking/Web/Proxy
|
||||||
|
URL: https://traefik.io/
|
||||||
|
# set the desired version in the spec-file
|
||||||
|
# download the source files and create the vendor tarball with "osc service mr"
|
||||||
|
Source0: https://github.com/traefik/traefik/releases/download/v%{version}/%{name}-v%{version}.src.tar.gz
|
||||||
|
Source1: vendor.tar.gz
|
||||||
|
Source2: %{name}.service
|
||||||
|
Source3: %{name}.yml
|
||||||
|
Source4: %{name}-user.conf
|
||||||
|
Source5: 90-%{name}.conf
|
||||||
|
BuildRequires: go-bindata
|
||||||
|
BuildRequires: golang-packaging
|
||||||
|
BuildRequires: systemd-rpm-macros
|
||||||
|
BuildRequires: sysuser-tools
|
||||||
|
BuildRequires: (golang(API) >= 1.22)
|
||||||
|
Recommends: podman
|
||||||
|
Conflicts: traefik2
|
||||||
|
Provides: group(%{name})
|
||||||
|
Provides: user(%{name})
|
||||||
|
%sysusers_requires
|
||||||
|
%{?systemd_requires}
|
||||||
|
%{go_provides}
|
||||||
|
|
||||||
|
%description
|
||||||
|
Traefik (pronounced traffic) is a modern HTTP reverse proxy and load balancer
|
||||||
|
that makes deploying microservices easy. Traefik integrates with your existing
|
||||||
|
infrastructure components (Docker, Swarm mode, Kubernetes, Marathon, Consul,
|
||||||
|
Etcd, Rancher, Amazon ECS) and configures itself automatically and dynamically.
|
||||||
|
|
||||||
|
Pointing Traefik at your orchestrator should be the only configuration step you need.
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%setup -q -c %{name}-%{version} -b0 -a1
|
||||||
|
%autopatch -p1
|
||||||
|
|
||||||
|
%build
|
||||||
|
%sysusers_generate_pre %{SOURCE4} %{name} %{name}-user.conf
|
||||||
|
%{goprep} %{project}
|
||||||
|
# see script/generate
|
||||||
|
go generate
|
||||||
|
|
||||||
|
build_date=$(date -u -d @${SOURCE_DATE_EPOCH:-$(date +%%s)} +"%%Y%%m%%d")
|
||||||
|
# see script/binary
|
||||||
|
CGO_ENABLED=1 GOGC=off go build \
|
||||||
|
-buildmode=%{buildmode} \
|
||||||
|
-mod=vendor \
|
||||||
|
-ldflags "-X github.com/traefik/traefik/v3/pkg/version.Version=%{version} \
|
||||||
|
-X github.com/traefik/traefik/v3/pkg/version.Codename='' \
|
||||||
|
-X github.com/traefik/traefik/v3/pkg/version.BuildDate=${build_date}" \
|
||||||
|
-installsuffix nocgo \
|
||||||
|
-o traefik \
|
||||||
|
./cmd/traefik
|
||||||
|
|
||||||
|
%install
|
||||||
|
# system user
|
||||||
|
install -D -m 0644 %{SOURCE4} %{buildroot}%{_sysusersdir}/%{name}-user.conf
|
||||||
|
|
||||||
|
install -d %{buildroot}/%{_sbindir}
|
||||||
|
install -D -p -m 0755 %{name} %{buildroot}%{_bindir}/%{name}
|
||||||
|
|
||||||
|
# service
|
||||||
|
install -D -p -m 0644 %{SOURCE2} %{buildroot}%{_unitdir}/%{name}.service
|
||||||
|
ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}
|
||||||
|
|
||||||
|
# configuration
|
||||||
|
install -D -p -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/%{name}/%{name}.yml
|
||||||
|
mkdir -p %{buildroot}%{_sysconfdir}/%{name}/conf.d
|
||||||
|
|
||||||
|
# install configuration to increase UDP buffer sizes
|
||||||
|
install -D -p -m 0644 %{SOURCE5} %{buildroot}%{_prefix}/lib/sysctl.d/90-%{name}.conf
|
||||||
|
|
||||||
|
# acme storage
|
||||||
|
install -d -m 0700 %{buildroot}%{_localstatedir}/lib/%{name}
|
||||||
|
touch %{buildroot}%{_localstatedir}/lib/%{name}/acme.json
|
||||||
|
|
||||||
|
# logging
|
||||||
|
mkdir -p %{buildroot}%{_localstatedir}/log/%{name}
|
||||||
|
|
||||||
|
%pre -f %{name}.pre
|
||||||
|
%service_add_pre %{name}.service
|
||||||
|
|
||||||
|
%post
|
||||||
|
%service_add_post %{name}.service
|
||||||
|
%{fillup_only -n %{name}}
|
||||||
|
# fix ownership for config and logging directory
|
||||||
|
chown -R traefik: %{_sysconfdir}/%{name} %{_localstatedir}/log/%{name}
|
||||||
|
|
||||||
|
# try to move acme.json file from old directory to new
|
||||||
|
if [ -e "%{_sysconfdir}/%{name}/acme.json" ] ; then
|
||||||
|
if [ -s "%{_sysconfdir}/%{name}/acme.json" ] ; then
|
||||||
|
if [ -s "%{_localstatedir}/lib/%{name}/acme.json" ] ; then
|
||||||
|
# if not-empty acme.json files exists on old and new location, write warning
|
||||||
|
echo "A non-empty acme.json file exists in:" 1>&2
|
||||||
|
echo "%{_sysconfdir}/%{name} and %{_localstatedir}/lib/%{name}" 1>&2
|
||||||
|
echo "Please clean up this situation and place the correct file in %{_localstatedir}/lib/%{name}" 1>&2
|
||||||
|
else
|
||||||
|
# if not-empty acme.json exists on old location and no file or empty file exists on new location
|
||||||
|
# move it to the new location
|
||||||
|
mv "%{_sysconfdir}/%{name}/acme.json" "%{_localstatedir}/lib/%{name}/acme.json"
|
||||||
|
sed -i -e 's|%{_sysconfdir}/traefik/acme.json|%{_localstatedir}/lib/traefik/acme.json|' %{_sysconfdir}/%{name}/%{name}.yml
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
# remove empty acme.json file from old location
|
||||||
|
rm "%{_sysconfdir}/%{name}/acme.json"
|
||||||
|
sed -i -e 's|%{_sysconfdir}/traefik/acme.json|%{_localstatedir}/lib/traefik/acme.json|' %{_sysconfdir}/%{name}/%{name}.yml
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# fix ownership for acme file
|
||||||
|
chown -R traefik: %{_localstatedir}/lib/%{name}/*
|
||||||
|
|
||||||
|
%preun
|
||||||
|
%service_del_preun %{name}.service
|
||||||
|
|
||||||
|
%postun
|
||||||
|
%service_del_postun %{name}.service
|
||||||
|
|
||||||
|
%files
|
||||||
|
%{_sysusersdir}/%{name}-user.conf
|
||||||
|
|
||||||
|
%license LICENSE.md
|
||||||
|
%doc README.md SECURITY.md CONTRIBUTING.md
|
||||||
|
%{_bindir}/%{name}
|
||||||
|
|
||||||
|
%{_unitdir}/%{name}.service
|
||||||
|
%{_sbindir}/rc%{name}
|
||||||
|
%{_prefix}/lib/sysctl.d/90-%{name}.conf
|
||||||
|
|
||||||
|
%defattr(0600, traefik, traefik, 0700)
|
||||||
|
%dir %{_sysconfdir}/%{name}
|
||||||
|
%dir %{_sysconfdir}/%{name}/conf.d
|
||||||
|
|
||||||
|
%dir %{_localstatedir}/lib/%{name}
|
||||||
|
%config(noreplace) %{_localstatedir}/lib/%{name}/acme.json
|
||||||
|
|
||||||
|
%config(noreplace) %{_sysconfdir}/%{name}/%{name}.yml
|
||||||
|
%dir %{_localstatedir}/log/%{name}
|
||||||
|
|
||||||
|
%changelog
|
||||||
153
traefik.yml
Normal file
153
traefik.yml
Normal file
@ -0,0 +1,153 @@
|
|||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Configuration for Traefik v3
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Global configuration
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
global:
|
||||||
|
checkNewVersion: false
|
||||||
|
sendAnonymousUsage: false
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# TLS specific configuration
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
#tls:
|
||||||
|
# options:
|
||||||
|
# default:
|
||||||
|
# sniStrict: true
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Entrypoints configuration
|
||||||
|
# https://doc.traefik.io/traefik/routing/entrypoints/
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
entryPoints:
|
||||||
|
web:
|
||||||
|
address: ":80"
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Redirect all requests incoming from http to https
|
||||||
|
# websecure/https must be enabled to be use this configuration
|
||||||
|
# https://doc.traefik.io/traefik/routing/entrypoints/#redirection
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
#http:
|
||||||
|
# redirections:
|
||||||
|
# entryPoint:
|
||||||
|
# to: websecure
|
||||||
|
# scheme: https
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Enable the https endpoint at port 443
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
#websecure:
|
||||||
|
# address: :443
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Enable the http3 and advertize it at UDP port 443
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
#http3: {}
|
||||||
|
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Traefik logs configuration
|
||||||
|
# Enabled if uncommented
|
||||||
|
# https://doc.traefik.io/traefik/observability/logs/
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
log:
|
||||||
|
# Set traefik's log-level
|
||||||
|
# Default: ERROR
|
||||||
|
#level: DEBUG
|
||||||
|
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Traefik access-log destination and format
|
||||||
|
# uncomment to enable
|
||||||
|
# https://doc.traefik.io/traefik/observability/logs/
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
#accessLog:
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Set the filepath for the traefik log-file.
|
||||||
|
# Default: os.Stdout
|
||||||
|
#filePath: /var/log/traefik/traefik.log
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Write logs in the 'common' or 'json' format.
|
||||||
|
# Default: common
|
||||||
|
#format: json
|
||||||
|
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# API and dashboard configuration.
|
||||||
|
# Uncomment to enable
|
||||||
|
# https://doc.traefik.io/traefik/operations/api/
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
api:
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Enable the API in insecure mode
|
||||||
|
# Default: false
|
||||||
|
insecure: false
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Enable the dashboard
|
||||||
|
# Default: true
|
||||||
|
dashboard: true
|
||||||
|
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Ping configuration
|
||||||
|
# https://doc.traefik.io/traefik/operations/ping/
|
||||||
|
# --------------------------------------------------------------------------
|
||||||
|
ping:
|
||||||
|
# --------------------------------------------------------------------------
|
||||||
|
# Name of the related entry point
|
||||||
|
# Default: "traefik"
|
||||||
|
entryPoint: traefik
|
||||||
|
|
||||||
|
|
||||||
|
# --------------------------------------------------------------------------
|
||||||
|
# Provider configuration
|
||||||
|
# --------------------------------------------------------------------------
|
||||||
|
providers:
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# Docker configuration provider
|
||||||
|
# Default: disabled
|
||||||
|
# https://doc.traefik.io/traefik/providers/docker/
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
#docker:
|
||||||
|
# ----------------------------------------------------------------------
|
||||||
|
# Docker server endpoint. Can be a tcp or a unix socket endpoint.
|
||||||
|
# Default: "unix:///var/run/docker.sock"
|
||||||
|
#endpoint: tcp://10.10.10.10:2375
|
||||||
|
# ----------------------------------------------------------------------
|
||||||
|
# defaultRule: Host(`{{ normalize .Name }}.docker.localhost`)
|
||||||
|
# ----------------------------------------------------------------------
|
||||||
|
# Expose containers by default in traefik
|
||||||
|
# Default: true
|
||||||
|
#exposedByDefault: false
|
||||||
|
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
# File configuration provider
|
||||||
|
# Default: disabled
|
||||||
|
# https://doc.traefik.io/traefik/providers/docker/
|
||||||
|
# ------------------------------------------------------------------------
|
||||||
|
file:
|
||||||
|
# ----------------------------------------------------------------------
|
||||||
|
# Defines the path to the directory that contains the configuration files.
|
||||||
|
# Default: unset
|
||||||
|
directory: /etc/traefik/conf.d
|
||||||
|
# ----------------------------------------------------------------------
|
||||||
|
# Set the watch option to true to allow Traefik to automatically
|
||||||
|
# watch for file changes
|
||||||
|
# Default: false
|
||||||
|
watch: true
|
||||||
|
|
||||||
|
# --------------------------------------------------------------------------
|
||||||
|
# ACME Certificate Resolvers configuration
|
||||||
|
# Default: not configured
|
||||||
|
# https://doc.traefik.io/traefik/https/acme/
|
||||||
|
# --------------------------------------------------------------------------
|
||||||
|
#certificatesResolvers:
|
||||||
|
# letsencryptResolver:
|
||||||
|
# acme:
|
||||||
|
# email: your@email
|
||||||
|
# storage: /var/lib/traefik/acme.json
|
||||||
|
# httpChallenge:
|
||||||
|
# entryPoint: web
|
||||||
|
|
||||||
3
vendor.tar.gz
Normal file
3
vendor.tar.gz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:06b2c014c6d8bed9f899abc19b72d8e862a41bebd64633ae39ea46a3d8115823
|
||||||
|
size 23228454
|
||||||
Loading…
Reference in New Issue
Block a user