traefik/crowdsec: remove dead plugin middleware reference (PR1/2)

viktor commented

2026-06-21 00:15:32 +00:00

Owner

PR1 of 2: drop the dead crowdsec middleware reference from ingress_factory + 8 call sites + the unused variable. Triggers a full-cluster apply re-rendering every ingress. PR2 (delete the middleware CRD + plugin) must wait until this fully applies and zero live ingresses reference traefik-crowdsec@kubernetescrd.

viktor added 1 commit 2026-06-21 00:15:32 +00:00

traefik/crowdsec: remove dead Yaegi-plugin middleware reference (PR1/2) 84a18a5529

The Traefik CrowdSec (Yaegi) bouncer plugin enforces nothing on Traefik 3.7.5
(handler never invoked) and is fully superseded by the cs-firewall-bouncer
(in-kernel nftables drop on direct hosts) + the Cloudflare IP-List/WAF rule
(proxied hosts). Drop the `traefik-crowdsec@kubernetescrd` middleware from the
ingress_factory chain and the 8 explicit `exclude_crowdsec = true` call sites,
and delete the now-unused `exclude_crowdsec` variable.

This is PR1 of a 2-phase removal: the reference is removed FIRST (a shared-module
change → full-cluster apply re-renders every ingress without the middleware) so
that PR2 can delete the `crowdsec` Middleware CRD + the plugin itself WITHOUT
leaving any ingress pointing at a missing middleware (which would error those
routers). PR2 MUST NOT land until this has fully applied and zero live ingresses
reference traefik-crowdsec@kubernetescrd.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

viktor added 1 commit 2026-06-21 00:17:42 +00:00

traefik/crowdsec: remove 6 hard-coded middleware refs the variable sweep missed (PR1/2) 71d0af084e

The first PR1 commit only dropped the ingress_factory reference + the 8
exclude_crowdsec call sites. But the crowdsec middleware is ALSO hard-coded
(not via the variable) in 6 more ingresses that build their middleware chain by
hand: owntracks, the monitoring Helm values (grafana + prometheus +
alertmanager), and the reverse-proxy module + its own separate ingress factory.
Remove all 6 so that after the full-cluster apply NO live ingress references
traefik-crowdsec@kubernetescrd — the precondition for PR2 deleting the CRD.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

viktor merged commit a091689603 into master

2026-06-21 00:17:52 +00:00

viktor referenced this pull request from a commit

2026-06-21 00:17:53 +00:00

Merge pull request 'traefik/crowdsec: remove dead plugin middleware reference (PR1/2)' (#8) from wizard/cs-deplugin-refs into master

Rows
Columns

traefik/crowdsec: remove dead plugin middleware reference (PR1/2) #8