Live Change Log

- hostPort may be blocked by firewall rules - NodePort 30843 is in valid range (30000-32767) - Browser connects to external port 8443 - Router forwards 8443 -> ...

- ConfigMap was missing SSL config from application.yml - Added server.ssl settings with environment variable support - Matches local application.yml configurat...

- NodePort range is 30000-32767, cannot use 8443 - Use hostPort to bind directly to host port 8443 - Removed service-websocket.yaml

- WebSocket API non supporta HTTP/2 (RFC 8441 non implementato) - Native WebSocket richiede HTTP/1.1 Aggiornamento che non supera HTTP/2 - Let SockJS auto-selec...

- Changed /ws route from HostRegexp to Host(media.kamocrm.com) - TLSOption can only be applied to explicit hosts (not regex) - ALPN negotiation happens during T...

- Created media-tls-http1 TLSOption with alpnProtocols: [http/1.1] - Referenced ONLY in media-route IngressRoute - Does not affect other Traefik routes - Fixes ...

- Added two routes: /ws for WebSocket (higher priority), rest for API - Only /ws uses media-websocket-transport (HTTP/2 disabled) - API routes can use HTTP/2 fo...

- Simplified to Host(media.kamocrm.com) - Avoids regex escaping issues with backticks - Tests show route is working with simple Host match

- Created TLSOption to disable HTTP/2 ALPN negotiation - Forces browsers to use HTTP/1.1 for media.kamocrm.com - WebSocket upgrades require HTTP/1.1 protocol - ...

- Added idleTimeout=0 to websecure entrypoint - Prevents Traefik from closing WebSocket connections due to inactivity - Fixes SockJS WebSocket timeout issues

- Cambio di trasporto SockJS da [websocket, xhr-streaming, xhr-polling] a [websocket] - Rimuove l'errore a XHR polling - Forza connessione WebSocket pura - Fa i...

- Entrambi i servizi sono nello stesso namespace (kamo) - Riferimenti espliciti namespace non necessari - Evita potenziali problemi trasversali

- Rimuoveto Next.js riscrittura per /ws percorsi - WebSocket routing ora gestito a livello Traefik IngressRoute - Traefik percorsi internal.kamocrm.com/ws -> Me...

- Aggiunto il percorso dedicato per /ws percorsi in IngressRoute - Routes internal.kamocrm.com/ws -> MediaService direttamente - Utilizza gli stessi serverTrasp...

- Aggiunto /ws percorso di bypass middleware - SockJS ha bisogno di connettersi a /ws/info senza reindirizzare - Le connessioni WebSocket avranno ancora un cook...

- Cambiato da media.kamocrm.com alla stessa origine (internal.kamocrm.com) - Evita problemi di connessione WebSocket cross-origin - Aggiunto Next.js rewrite reg...

- Traefik error: cross-namespace format not allowed when crossnamespace disabled - IngressRoute and ServersTransport are in same namespace (kamo) - Use simple n...

- Utilizzo di un semplice video: vero per la condivisione dello schermo - La costruzione dovrebbe avere successo

- PhoneOff icona non esiste in @mui/icons-material - Utilizzando CallEnd che è l'icona MUI corretta - File duplicati non utilizzati (ChatBoxWithWebRTC, VideoCal...

- Coturn relay: 52000-65535 (13,536 ports) - Avoids: Janus RTP (10000-49151) and WireGuard (51820-51821) - No overlap between services

- Changed max-port from 65535 to 51800 to avoid conflicts - Avoids WireGuard on UDP 51820 and other VPN services on 51821 - Provides 2,649 ports (49152-51800) f...

- Replace netstat-based health probes with TCP socket checks (netstat not available in coturn/coturn:latest Alpine image) - Remove conflicting no-stdout-log dir...

Traefik requires the @kubernetescrd suffix when referencing CRD resources like ServersTransport.

Remove media-websocket-upgrade middleware that was forcing headers and causing WebSocket handshake issues. Traefik automatically handles WebSocket upgrade when ...

- Utilizzare xhr-streaming e xhr-polling trasporti invece di websocket - Questi trasporti funzionano sia con HTTP/1.1 che HTTP/2 senza richiedere aggiornamenti ...

- Add $ to end of PathRegexp to ensure exact match - Fixes regex parsing error in Traefik - /ws/info is now working (200 OK) but WebSocket upgrade route needs p...

- Change route match from PathPrefix(/ws/) to **************** - /ws/info is a regular HTTP request, not a WebSocket upgrade - Adding Upgrade header to /ws/info...

- Add Connection: Upgrade header along with Upgrade: websocket - Both headers are required for proper WebSocket upgrade handshake - This ensures HTTP/2 Extended...

- Create separate route matching /ws/** paths with media-websocket-upgrade middleware - This ensures Upgrade: websocket header is added for WebSocket upgrade re...

- Create ServersTransport resource with disableHTTP2: true - Reference ServersTransport in IngressRoute service configuration - Remove invalid disableHTTP2 fiel...

- Add disableHTTP2: true to force HTTP/1.1 for backend connections - HTTP/2 Extended CONNECT is not properly converting Upgrade header - WebSocket upgrades requ...

- Impostare lo schema: http per garantire una corretta gestione HTTP/1.1 per gli aggiornamenti WebSocket - HTTP/2 Extended CONNECT ha bisogno di una corretta co...

- Rimuovere non valido DefaultHandshakeHandler override (metodo non esiste) - Rimuovere il set non validoSupressCors chiamata (metodo non esiste) - Tenere HttpS...

- Add handshake handler and interceptor logging to diagnose WebSocket connection issues - Configure SockJS to suppress CORS (handled by Spring Security) and dis...

- Configurare esplicitamente l'ordine di trasporto SockJS per preferire WebSocket, quindi fallback a xhr-streaming/xhr-polling - Gli aggiornamenti HTTP/2 WebSoc...

- media-cors middleware was clearing CORS headers which interfered with WebSocket upgrades - WebSocket connections require direct pass-through without header mo...

- PatternParseException: No more pattern data allowed after {*...} or ** - /ws/** already covers all paths under /ws including /ws/info - This was causing 500 e...

- Apply media-cors middleware to allow CORS headers for WebSocket connections - Matches the pattern used for theme domains

- Add explicit permit for OPTIONS method on all paths - Add explicit permit for /ws/info endpoint (SockJS handshake) - This ensures CORS preflight requests reac...

- Explicitly handle '*' wildcard for origins, methods, and headers - Add WebSocket-related headers to exposed headers - Add logging to verify CORS configuration...

- Add logging to verify WebSocket endpoint registration - Configure SockJS heartbeat and disconnect delay - This should help diagnose why SockJS handshake isn't...

- Aggiunto logging per verificare il percorso è stato colpito - Il file di percorso esiste e la struttura è corretta per Next.js 15

- STOMP Il cliente non ha una proprietà "attiva" - Controllare solo la proprietà "connessa" che è l'indicatore di stato corretto

- onWebSocketError non è una proprietà valida in ClientOptions - I gestori di errori SockJS (onerror, onclose) già forniscono la gestione degli errori

- Aggiunto I gestori di errore SockJS (onopen, onerror, onclose) per catturare guasti di connessione - Rilevamento di timeout di connessione aggiunto (10 second...

- Removed duplicate /ws endpoint registration (SockJS already handles native WebSocket) - Added null check for payload in subscribeToSession - This may fix WebS...

- Spring Security does not allow path segments after /** pattern - /ws/** already matches all paths under /ws including websocket endpoints - This fixes Pattern...

- Modifiche convertite che superano la convalida del certificato - I certificati sono emessi dal servizio di auto-cert (crittografia di Let), non auto-firmato -...