spikerj/spikersoft-issues
1
0
Fork 0
Code Issues 196 Pull Requests Actions Packages Projects Releases Wiki Activity

infra(traefik): bump Traefik v3.7.0 → v3.7.7 (latest) #469

New Issue
Closed
opened 2026-07-11 04:02:09 +00:00 by spikerj · 1 comment
spikerj commented 2026-07-11 04:02:09 +00:00
Owner
Copy Link
Copy Source

Summary

Pin the ingress Traefik service to the latest release, v3.7.7 (published 2026-07-08), up from the currently-deployed v3.7.0. Patch bump within the same 3.7 minor — picks up the recent bug/security fixes (rules HostSNI()/Host() consistency, middleware, k8s, ACME go-pkcs12 bump, OpenTelemetry otel v1.44.0).

Scope

  • traefik/docker-stack.yml — image: traefik:v3.7.0 → traefik:v3.7.7 (the deployed Swarm ingress).
  • README.md — update the traefik:v3.7.0 reference in the Ingress section.

Migration note (no action needed here)

v3.7.7 changes the Host matcher so a bare * is a catch-all (consistent with TCP HostSNI()). Our HTTP→HTTPS catch-all uses HostRegexp('{any:.+}'), not Host(), so no routing rule changes are required.

Deploy / verify

docker stack deploy -c traefik/docker-stack.yml traefik

After rollout: confirm the dashboard/API is up, TLS certs still resolve via myresolver, and existing Host() routes (git, etc.) still serve.

Repo: spikersoft-infrastructure

## Summary Pin the ingress Traefik service to the latest release, **v3.7.7** (published 2026-07-08), up from the currently-deployed **v3.7.0**. Patch bump within the same `3.7` minor — picks up the recent bug/security fixes (rules `HostSNI()`/`Host()` consistency, middleware, k8s, ACME `go-pkcs12` bump, OpenTelemetry `otel` v1.44.0). ## Scope - `traefik/docker-stack.yml` — `image: traefik:v3.7.0` → `traefik:v3.7.7` (the deployed Swarm ingress). - `README.md` — update the `traefik:v3.7.0` reference in the Ingress section. ## Migration note (no action needed here) v3.7.7 changes the `Host` matcher so a bare `*` is a catch-all (consistent with TCP `HostSNI(`*`)`). Our HTTP→HTTPS catch-all uses `HostRegexp('{any:.+}')`, not `Host(`*`)`, so no routing rule changes are required. ## Deploy / verify ``` docker stack deploy -c traefik/docker-stack.yml traefik ``` After rollout: confirm the dashboard/API is up, TLS certs still resolve via `myresolver`, and existing `Host()` routes (git, etc.) still serve. Repo: `spikersoft-infrastructure`
spikerj commented 2026-07-11 23:26:28 +00:00
Author
Owner
Copy Link
Copy Source

Resolved in spikersoft-infrastructure PR #17 (merged): traefik pinned to v3.7.7 (follow-up swarm cleanup in PR #20 / #474). Closing.

Resolved in spikersoft-infrastructure PR #17 (merged): traefik pinned to v3.7.7 (follow-up swarm cleanup in PR #20 / #474). Closing.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
agentic
Actionable surfaced by the agentic architecture & security review
 bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 sonarqube
Code quality issue surfaced by SonarQube (bug / code smell)
 wontfix
This won't be fixed
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
spikerj (Joseph Spiker)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: spikerj/spikersoft-issues#469