I am testing upgrading from 2.4 to 2.5.
installed traefik 2.5.1 using helm and it runs fine.
To access the dashboard i use the following yaml file.
I commented the middleware lines.
If i enable them it works in 2.4 but in 2.5 i get 404 page not found for dashboard.
My yaml file:
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
name: dashboard
namespace: traefik
spec:
entryPoints:
- websecure
routes:
- kind: Rule
match: Host(tr3dash.jhmnieuwenhuis.com) && PathPrefix(/dashboard) || PathPrefix(/api)
services:
- kind: TraefikService
name: api@internal
middlewares:
- name: traefik-test-auth@kubernetescrd
- name: traefik-security@kubernetescrd
tls:
certResolver: le
domains:
- main: tr3dash.jhmnieuwenhuis.com
options:
name: tlsoptions
apiVersion: traefik.containo.us/v1alpha1
kind: TLSOption
metadata:
name: tlsoptions
namespace: traefik
spec:
minVersion: VersionTLS12
cipherSuites:
- TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
- TLS_AES_256_GCM_SHA384
- TLS_AES_128_GCM_SHA256
- TLS_CHACHA20_POLY1305_SHA256
- TLS_FALLBACK_SCSV
curvePreferences:
- CurveP521
- CurveP384
sniStrict: true
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: security
namespace: traefik
spec:
headers:
frameDeny: true # the page can not be loaded in an iframe, Set frameDeny to true to add the X-Frame-Options header with the value of DENY.
sslRedirect: true # The sslRedirect only allow HTTPS requests when set to true.
browserXssFilter: true # Limit XSS, Set browserXssFilter to true to add the X-XSS-Protection header with the value 1; mode=block.
contentTypeNosniff: true # Do not detect Mime type by browser, Set contentTypeNosniff to true to add the X-Content-Type-Options header with the value nosniff.
# HSTS HTTP Strict Transport Security
stsIncludeSubdomains: true # If the stsIncludeSubdomains is set to true, the includeSubDomains directive is appended to the Strict-Transport-Security header. all subdomains have to HSTS complained
stsPreload: true # https://hstspreload.org/
stsSeconds: 31536000 # To be able to use HSTS Preloading, this parameter must be at least 31536000 second