Migrating Connections Ingress to Traefik – beware of these outdated Helm values

Posted on by

As the Ingress Nginx controller is has officially been retired in March 2026, HCL has moved the Ingress controller for the HCL Connections Component Pack to Traefik. The documentation lists a tarball with a script and yaml-file for the migration and deployment of Traefik.

The documentation lets you install the latest version of Traefik. At the time of writing the latest stable Traefik branche is 3.7. This branch has different helm values from the version that HCL apparently used when creating the tarball. A couple of helm values in the provided cnx-ingress-traefik-values.yml are no longer valid. These are the culprits:

service:
  type: NodePort

should be:

service:
  spec:
    type: NodePort

and

logs:
  # See https://github.com/traefik/traefik-helm-chart/blob/master/traefik/values.yaml for log options.
  general:
    level: INFO
    format: json
  # Optional: Enable Traefik access logs
  access:
    enabled: false
    format: json

should be:

log:
  # See https://github.com/traefik/traefik-helm-chart/blob/master/traefik/values.yaml for log options.
  level: INFO
  format: "json"
# Optional: Enable Traefik access logs
accessLog:
  enabled: false
  format: "json"

If you want to see the structure of the helm values for the Traefik version that you plan to use, use helm show values traefik/traefik to see all the default values.

Traefik Dashboard

If you want to use the Traefik dashboard, you can uncomment the relevant lines the cnx-ingress-traefik-values.yml, but what I found missing in the documentation, was that you have to create a Kubernetes secret to be able to access it. To create this secret, first use htpasswd to generate the hash for the password that you plan to use. You will find htpasswd in the bin-directory of your IBM HTTP Server. For example:

htpasswd -nb admin MyIncrediblyDifficultPassword

With the result, create a Kubernetes secret:

kubectl create secret generic cnx-ingress-dashboard-auth --from-literal=users='admin:$apr1$<some-string>' -n connections