From 56dadda453b75f9725139a1e6314c98e0eff3d5e Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Fri, 19 Jun 2026 16:58:33 +0000 Subject: [PATCH] traefik: pin helm chart to 40.2.0 (deployed version) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The traefik helm_release had no chart version pin, so a refreshed helm repo index resolves `chart = "traefik"` to the latest (41.0.0), whose values schema rejects this stack's `logs` block ("Additional property logs is not allowed") — an unpinned apply attempts that upgrade and fails (atomic rollback). Pin to the deployed 40.2.0 (release rev 57, since 2026-05-30) so applies are deterministic; chart bumps must be deliberate with a values migration. Follow-up to fd0c7493 (Turnstile captcha), which was applied with this pin already in live TF state — this lands the pin in git to remove the drift. Co-Authored-By: Claude Opus 4.8 --- stacks/traefik/modules/traefik/main.tf | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/stacks/traefik/modules/traefik/main.tf b/stacks/traefik/modules/traefik/main.tf index b6b246f6..f0b235e5 100644 --- a/stacks/traefik/modules/traefik/main.tf +++ b/stacks/traefik/modules/traefik/main.tf @@ -70,6 +70,12 @@ resource "helm_release" "traefik" { name = "traefik" repository = "https://traefik.github.io/charts" chart = "traefik" + # Pin to the deployed chart version. Was unpinned, so a refreshed helm repo + # index silently tries to upgrade to the latest chart on the next apply — + # chart 41.0.0 rejects this values block's `logs` key ("Additional property + # logs is not allowed"). Bump deliberately (with values migration), never + # implicitly. Deployed since 2026-05-30 (release rev 57). + version = "40.2.0" atomic = true timeout = 600