viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

traefik: pin helm chart to 40.2.0 (deployed version)
All checks were successful
ci/woodpecker/push/default Pipeline was successful
Details

Browse source 
The traefik helm_release had no chart version pin, so a refreshed helm repo
index resolves `chart = "traefik"` to the latest (41.0.0), whose values schema
rejects this stack's `logs` block ("Additional property logs is not allowed") —
an unpinned apply attempts that upgrade and fails (atomic rollback). Pin to the
deployed 40.2.0 (release rev 57, since 2026-05-30) so applies are deterministic;
chart bumps must be deliberate with a values migration.

Follow-up to fd0c7493 (Turnstile captcha), which was applied with this pin
already in live TF state — this lands the pin in git to remove the drift.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Viktor Barzin 2026-06-19 16:58:33 +00:00
parent 4a66377425
commit 56dadda453
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
stacks/traefik/modules/traefik/main.tf
View file

@ -70,6 +70,12 @@ resource "helm_release" "traefik" {
name = "traefik"
repository = "https://traefik.github.io/charts"
chart = "traefik"
# Pin to the deployed chart version. Was unpinned, so a refreshed helm repo
# index silently tries to upgrade to the latest chart on the next apply —
# chart 41.0.0 rejects this values block's `logs` key ("Additional property
# logs is not allowed"). Bump deliberately (with values migration), never
# implicitly. Deployed since 2026-05-30 (release rev 57).
version = "40.2.0"
atomic = true
timeout = 600