Migration: Steps needed between the versions

v2.0 to v2.1

In v2.1, a new CRD called TraefikService was added. While updating an installation to v2.1,it is required to apply that CRD before as well as enhance the existing ClusterRole definition to allow Traefik to use that CRD.

To add that CRD and enhance the permissions, following definitions need to be applied to the cluster.

  1. apiVersion: apiextensions.k8s.io/v1beta1
  2. kind: CustomResourceDefinition
  3. metadata:
  4.   name: traefikservices.traefik.containo.us
  6. spec:
  7.   group: traefik.containo.us
  8.   version: v1alpha1
  9.   names:
  10.     kind: TraefikService
  11.     plural: traefikservices
  12.     singular: traefikservice
  13.   scope: Namespaced

  1. kind: ClusterRole
  2. apiVersion: rbac.authorization.k8s.io/v1beta1
  3. metadata:
  4.   name: traefik-ingress-controller
  6. rules:
  7.   - apiGroups:
  8.       - ""
  9.     resources:
  10.       - services
  11.       - endpoints
  12.       - secrets
  13.     verbs:
  14.       - get
  15.       - list
  16.       - watch
  17.   - apiGroups:
  18.       - extensions
  19.     resources:
  20.       - ingresses
  21.     verbs:
  22.       - get
  23.       - list
  24.       - watch
  25.   - apiGroups:
  26.       - extensions
  27.     resources:
  28.       - ingresses/status
  29.     verbs:
  30.       - update
  31.   - apiGroups:
  32.       - traefik.containo.us
  33.     resources:
  34.       - middlewares
  35.     verbs:
  36.       - get
  37.       - list
  38.       - watch
  39.   - apiGroups:
  40.       - traefik.containo.us
  41.     resources:
  42.       - ingressroutes
  43.     verbs:
  44.       - get
  45.       - list
  46.       - watch
  47.   - apiGroups:
  48.       - traefik.containo.us
  49.     resources:
  50.       - ingressroutetcps
  51.     verbs:
  52.       - get
  53.       - list
  54.       - watch
  55.   - apiGroups:
  56.       - traefik.containo.us
  57.     resources:
  58.       - tlsoptions
  59.     verbs:
  60.       - get
  61.       - list
  62.       - watch
  63.   - apiGroups:
  64.       - traefik.containo.us
  65.     resources:
  66.       - traefikservices
  67.     verbs:
  68.       - get
  69.       - list
  70.       - watch

After having both resources applied, Traefik will work properly.