chore(traefik): re-trigger provision-secrets — traefik.env was found missing on disk post-migration
ci/woodpecker/push/deploy Pipeline was successful
ci/woodpecker/push/deploy Pipeline was successful
traefik/traefik.env did not exist on the host after PR #21 merged. Root cause: provisioning only renders on a push touching traefik/, and traefik is bootstrap-tier (stack-deploy.sh runs manually, never via the pipeline). A manual stack-deploy.sh traefik run apparently happened while the env file was absent, causing Swarm's own interpolation to render KEEPALIVED_PASSWORD/KEEPALIVED_VIRTUAL_IPS as empty strings on keepalived-master. This comment-only change re-triggers provision-secrets; a manual stack-deploy.sh traefik run is still required afterward to apply the freshly-rendered env to the running services.
This commit is contained in:
@@ -30,6 +30,19 @@
|
|||||||
# keepalived itself. Set TRAEFIK_KEEPALIVED_PASSWORD in Woodpecker to a
|
# keepalived itself. Set TRAEFIK_KEEPALIVED_PASSWORD in Woodpecker to a
|
||||||
# value 8 characters or fewer (or accept that only the first 8 chars are
|
# value 8 characters or fewer (or accept that only the first 8 chars are
|
||||||
# actually significant) so the effective negotiated value is unambiguous.
|
# actually significant) so the effective negotiated value is unambiguous.
|
||||||
|
#
|
||||||
|
# 2026-09-12 RE-TRIGGER: traefik.env was found MISSING on disk after the
|
||||||
|
# Pattern C migration merged — the manifest-driven provisioning render only
|
||||||
|
# happens on a push that changes traefik/, and traefik is bootstrap-tier
|
||||||
|
# (stack-deploy.sh must be run manually; the pipeline never auto-deploys
|
||||||
|
# this stack). A manual `stack-deploy.sh traefik` had apparently been run
|
||||||
|
# while traefik.env was absent, causing Swarm's own interpolation to
|
||||||
|
# silently render KEEPALIVED_PASSWORD/KEEPALIVED_VIRTUAL_IPS as EMPTY
|
||||||
|
# STRINGS on keepalived-master (not missing — empty, which is worse,
|
||||||
|
# since it's a valid-looking VRRP auth string that mismatches everything).
|
||||||
|
# This comment-only change re-triggers provision-secrets to re-render and
|
||||||
|
# re-ship traefik.env; a manual `stack-deploy.sh traefik` must still be run
|
||||||
|
# afterward to actually apply it to the running services.
|
||||||
# ─────────────────────────────────────────────────────────────────────────
|
# ─────────────────────────────────────────────────────────────────────────
|
||||||
|
|
||||||
# ── Keepalived (non-secret config) ────────────────────────────────────────
|
# ── Keepalived (non-secret config) ────────────────────────────────────────
|
||||||
|
|||||||
Reference in New Issue
Block a user