Changeset 0.28.8 (#194)

chart/templates/ingress.yaml

@@ -5,9 +5,14 @@ metadata:
   name: {{ .Release.Name }}-ingress
   labels:
     {{- include "switchboard.labels" . | nindent 4 }}
-  {{- with .Values.ingress.annotations }}
+  {{- if or .Values.ingress.annotations (and (eq (default "traefik" .Values.ingress.className) "traefik") .Values.ingress.retry.annotateIngress) }}
   annotations:
+    {{- with .Values.ingress.annotations }}
     {{- toYaml . | nindent 4 }}
+    {{- end }}
+    {{- if and (eq (default "traefik" .Values.ingress.className) "traefik") .Values.ingress.retry.annotateIngress }}
+    traefik.ingress.kubernetes.io/router.middlewares: {{ .Release.Namespace }}-{{ .Release.Name }}-retry@kubernetescrd
+    {{- end }}
   {{- end }}
 spec:
   {{- if .Values.ingress.className }}

chart/templates/middleware-retry.yaml

@@ -0,0 +1,14 @@
+{{- if .Values.ingress.enabled }}
+{{- if eq (default "traefik" .Values.ingress.className) "traefik" }}
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: {{ .Release.Name }}-retry
+  labels:
+    {{- include "switchboard.labels" . | nindent 4 }}
+spec:
+  retry:
+    attempts: {{ .Values.ingress.retry.attempts | default 2 }}
+    initialInterval: {{ .Values.ingress.retry.initialInterval | default "100ms" }}
+{{- end }}
+{{- end }}

chart/values.yaml

@@ -89,6 +89,14 @@ ingress:
   tls:
     enabled: false
     secretName: ""
+  # Traefik retry middleware (auto-applied when className=traefik).
+  # The Middleware CRD is always created. Set annotateIngress: true to wire
+  # it to the ingress. Only enable after confirming the middleware CRD exists
+  # (Traefik invalidates the entire router if a referenced middleware is missing).
+  retry:
+    attempts: 2
+    initialInterval: 100ms
+    annotateIngress: false
 
 # ── Auth ───────────────────────────────────
 auth: