traefik-helm-chart icon indicating copy to clipboard operation
traefik-helm-chart copied to clipboard

fix(misc): hostNetwork deployment when hostPort mismatches containerPort

Open faust64 opened this issue 4 years ago • 3 comments
trafficstars

  • fixes hostNetwork configuration, when containerPort != hostPort
  • fixes PodSecurityPolicy, when running privileged
  • fixes rbac, when rbac.namespaced=true, access to ingressclass is defined
  • adds --providers.kubernetescrd.allowcrossnamespace option to podTemplate, defaults to false, can be changed setting providers.kubernetesCRD.allowCrossNamespace=true. A default to false might be preferable, as Kubernetes Ingresses doesn't usually allow referring to resources in other namespaces. When you implement RBAC, maybe even NetworkPolicies: that does not sound like an option you would enable. Even though for sure, it could be useful in some chosen scenario.

Fixes #336

faust64 avatar Jan 14 '21 15:01 faust64

Anyone? Is there anything else I can do?

faust64 avatar Feb 04 '21 15:02 faust64

Also fixes #358

faust64 avatar Feb 15 '21 07:02 faust64

Hello @faust64,

Thanks for your work!

I wonder if you can split the fix for the issues #358/#499 in another PR, it would allow to separate concerns and move on faster, WDYT?

rtribotte avatar Oct 13 '21 09:10 rtribotte

Superseeded by #650

mloiseleur avatar Oct 07 '22 14:10 mloiseleur