[release-1.25] Packaged Traefik 2.9.4 has incorrect access logs

[brandond]

• Backport Packaged Traefik 2.9.4 has incorrect access logs #7301

[endawkins]

Validated on branch 1.25 with commit 3ce8dd1 / version 1.25

Environment Details

Infrastructure

• Cloud
• Hosted

Node(s) CPU architecture, OS, and Version:

Linux ip-172-31-10-48 5.14.21-150400.24.46-default #1 SMP PREEMPT_DYNAMIC Thu Feb 9 08:38:18 UTC 2023 (2d95137) x86_64 x86_64 x86_64 GNU/Linux
NAME="SLES"
VERSION="15-SP4"
VERSION_ID="15.4"
PRETTY_NAME="SUSE Linux Enterprise Server 15 SP4"
ID="sles"
ID_LIKE="suse"
ANSI_COLOR="0;32"
CPE_NAME="cpe:/o:suse:sles:15:sp4"
DOCUMENTATION_URL="https://documentation.suse.com/"

Cluster Configuration:

1 server

Config.yaml:

write-kubeconfig-mode: 644
debug: true
token: test
cluster-init: true

Additional files

N/A

Testing Steps

1. Copy config.yaml

$ sudo mkdir -p /etc/rancher/k3s && sudo cp config.yaml /etc/rancher/k3s

2. Install k3s
3. Run the following commands:

$ kubectl get pod/traefik-66fd46ccd-pbz9r -o yaml -n kube-system | grep -i image
$ kubectl logs -l app.kubernetes.io/name=traefik -n kube-system
$ kubectl describe pod/traefik-66fd46ccd-pbz9r -n kube-system | grep "traefik"
$ kubectl get node,all -A -o wide | grep "2.9.10"
$ helm ls -A

Replication Results:

• k3s version used for replication:

N/A - unable to reproduce issue

N/A - unable to reproduce the issue

Validation Results:

• k3s version used for validation:

k3s -v
k3s version v1.25.9+k3s-3ce8dd17 (3ce8dd17)
go version go1.19.8

kubectl get pod/traefik-66fd46ccd-pbz9r -o yaml -n kube-system | grep -I image
    image: rancher/mirrored-library-traefik:2.9.10
    imagePullPolicy: IfNotPresent
    image: docker.io/rancher/mirrored-library-traefik:2.9.10
    imageID: docker.io/rancher/mirrored-library-traefik@sha256:aaec134463b277ca7aa4f88807c8b67f2ec05d92a8f0432c0540b7ecc8fe724a

kubectl logs -l app.kubernetes.io/name=traefik -n kube-system
time="2023-05-18T01:32:22Z" level=info msg="Configuration loaded from flags."

kubectl describe pod/traefik-66fd46ccd-pbz9r -n kube-system | grep "traefik"
Name:                 traefik-66fd46ccd-pbz9r
Service Account:      traefik
Labels:               app.kubernetes.io/instance=traefik-kube-system
                      app.kubernetes.io/name=traefik
                      helm.sh/chart=traefik-21.2.1_up21.2.0
Controlled By:  ReplicaSet/traefik-66fd46ccd
  traefik:
    Image:         rancher/mirrored-library-traefik:2.9.10
    Image ID:      docker.io/rancher/mirrored-library-traefik@sha256:aaec134463b277ca7aa4f88807c8b67f2ec05d92a8f0432c0540b7ecc8fe724a
      --entrypoints.traefik.address=:9000/tcp
      --providers.kubernetesingress.ingressendpoint.publishedservice=kube-system/traefik
  Normal  Scheduled  3m15s  default-scheduler  Successfully assigned kube-system/traefik-66fd46ccd-pbz9r to ip-172-31-10-48
  Normal  Pulling    3m15s  kubelet            Pulling image "rancher/mirrored-library-traefik:2.9.10"
  Normal  Pulled     3m12s  kubelet            Successfully pulled image "rancher/mirrored-library-traefik:2.9.10" in 2.990650867s (2.990659463s including waiting)
  Normal  Created    3m12s  kubelet            Created container traefik
  Normal  Started    3m12s  kubelet            Started container traefik


kubectl get node,all -A -o wide | grep "2.9.10"
kube-system   deployment.apps/traefik                  1/1     1            1           2m45s   traefik                  rancher/mirrored-library-traefik:2.9.10   app.kubernetes.io/instance=traefik-kube-system,app.kubernetes.io/name=traefik
kube-system   replicaset.apps/traefik-66fd46ccd                   1         1         1       2m45s   traefik                  rancher/mirrored-library-traefik:2.9.10   app.kubernetes.io/instance=traefik-kube-system,app.kubernetes.io/name=traefik,pod-template-hash=66fd46ccd

helm ls -A
WARNING: Kubernetes configuration file is group-readable. This is insecure. Location: /etc/rancher/k3s/k3s.yaml
WARNING: Kubernetes configuration file is world-readable. This is insecure. Location: /etc/rancher/k3s/k3s.yaml
NAME       	NAMESPACE  	REVISION	UPDATED                                	STATUS  	CHART                      	APP VERSION
traefik    	kube-system	1       	2023-05-18 01:32:17.178103912 +0000 UTC	deployed	traefik-21.2.1+up21.2.0    	v2.9.10
traefik-crd	kube-system	1       	2023-05-18 01:32:14.249922653 +0000 UTC	deployed	traefik-crd-21.2.1+up21.2.0	v2.9.10

Additional context / logs: