Can't redirect through Traefik from http to https, and a probable deeper problem...

[Annakan]

Can't redirect through Traefik from http to https, and a probable deeper problem

The Symptoms:

Although my configuration is this in /var/lib/rancher/k3s/server/manifests/traefik-config.yaml:

apiVersion: helm.cattle.io/v1
kind: HelmChartConfig
metadata:
  name: traefik
  namespace: kube-system
spec:
  valuesContent: |-
    image:
      repository: docker.io/library/traefik
      tag: "3.5"

    globalArguments:
      - "--global.sendanonymoususage=false"
      - "--global.checknewversion=false"

    additionalArguments:
      - "--serversTransport.insecureSkipVerify=true"
      - "--log.level=DEBUG"
      - "--accesslog=true"
      - "--entryPoints.web.forwardedHeaders.trustedIPs=127.0.0.1/32,192.168.0.0/20,10.0.0.0/16"
      - "--entryPoints.websecure.forwardedHeaders.trustedIPs=127.0.0.1/32,192.168.0.0/20,10.0.0.0/16"

    deployment:
      enabled: true
      replicas: 1
      annotations: {}
      podAnnotations: {}
      additionalContainers: []
      initContainers: []

    ports:

      web:
        port: 80
        #nodePort: 3001
        redirections:
          entrypoint:
            to: websecure
            scheme: https
            priority: 10

      websecure:
        port: 443
        #nodePort: 3000
        http3:
          enabled: true
          advertisedPort: 4443
        tls:
          enabled: true

    ingressRoute:
      dashboard:
        enabled: false

    providers:
      kubernetesCRD:
        enabled: true
        ingressClass: traefik-external
        allowExternalNameServices: true
      kubernetesIngress:
        enabled: true
        allowExternalNameServices: true
        publishedService:
          enabled: false

    rbac:
      enabled: true

(the configuration is valid, I checked in the logs)

No redirect is working, all http request end-up in 404 page not found.

I activated the traefik access logs and this is what I see :

[traefik-6f9b8d7958-n2jqp][traefik] 2025-08-28T13:16:05.962280146+02:00  | 10.42.0.1 - - [28/Aug/2025:11:16:05 +0000] "GET / HTTP/1.1" 404 19 "-" "-" 489 "-" "-" 0ms
[traefik-6f9b8d7958-n2jqp][traefik] 2025-08-28T13:16:06.154393693+02:00  | 10.42.0.1 - - [28/Aug/2025:11:16:06 +0000] "GET / HTTP/1.1" 404 19 "-" "-" 490 "-" "-" 0ms

This 10.42.0.1 (ip addr | grep 10.42.0.1) is the cni0 interface of the Flannel bridge, if I understand it right :

5: cni0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP group default qlen 1000
    link/ether fa:4e:96:73:8f:6f brd ff:ff:ff:ff:ff:ff
    inet 10.42.0.1/24 brd 10.42.0.255 scope global cni0
       valid_lft forever preferred_lft forever
    inet6 fe80::f84e:96ff:fe73:8f6f/64 scope link proto kernel_ll
       valid_lft forever preferred_lft forever

[... here was a waste of space and time for crazy noob hypothesis for what ended up being a typo error ... ]

[brandond]

You have:

  web:
    redirections:
      entrypoint:

The chart values.yaml has:

  web:
    redirections:
      entryPoint: {}

Capitalization matters.

See also the docs here: https://doc.traefik.io/traefik/reference/install-configuration/entrypoints/#redirection

[Annakan]

Ok I'll go bury myself ASAP.

The schema validation did not catch this one, it does protest for a deprecated or wrong top level key.

Sorry for the waste of time, know that you have saved me lots of time because I was at the point where you don't see what you wrote but what you intended to write. I should know better.

thanks