traefik helm

Traefik is a HTTP reverse proxy and load balancer for microservices. It integrates with popular orchestration systems, such as Kubernetes, to provide seamless and automatic service discovery, load balancing, and proxying for your applications. Traefik is designed to be fast, efficient, and easy to use, making it a good solution for home lab environments. With Traefik, you can expose your applications to the internet with ease, providing remote access to your services from anywhere. Whether you're looking to host a personal website, run a web-based service, or simply provide external access to your applications.

Install

Install with:

helm repo add traefik-charts https://helm.traefik.io/traefik/
helm install traefik traefik-charts/traefik -f values.yaml

Examples

See examples from other people.

Top Repositories (0 out of 15)

NameRepoStarsVersionTimestamp

Resources

64Mi100Mi110Mi256Mi
256Mi500Mi900Mi1500Mi
15m50m500m

Values

See the most popular values for this chart:

KeyTypes
ingressRoute.dashboard.enabled (14)
false
boolean
ingressRoute.dashboard.entryPoints[] (1)
- web
string
ingressClass.enabled (13)
true
boolean
ingressClass.isDefaultClass (12)
true
boolean
ingressClass.fallbackApiVersion (6)
v1
string
ingressClass.name (1)
traefik
string
service.type (13)
LoadBalancer
string
service.enabled (12)
true
boolean
service.spec.externalTrafficPolicy (9)
Local
string
service.spec.loadBalancerIP (6)
${METALLB_TRAEFIK_ADDR}
string
service.spec.loadBalancerClass (1)
io.cilium/bgp-control-plane
string
service.spec.LoadBalancerIPs (1)
${CLUSTER_LB_TRAEFIK}
string
service.annotations."io.cilium/lb-ipam-ips" (4)
${TRAEFIK_IP}
string
service.annotations."metallb.universe.tf/allow-shared-ip" (2)
traefik
string
service.annotations."metallb.io/loadBalancerIPs" (1)
10.10.201.1
string
service.single (3)
false
boolean
service.externalTrafficPolicy (2)
Cluster
string
service.ipFamilies[] (1)
- IPv4
string
service.ipFamilyPolicy (1)
RequireDualStack
string
service.labels."io.cilium/bgp-announce" (1)
worker
string
service.loadBalancerIPs[] (1)
- ${TRAEFIK_ADDR}
string
additionalArguments[] (12)
- --providers.kubernetesingress.ingressendpoint.ip=${METALLB_TRAEFIK_ADDR}
- --providers.kubernetesingress.allowexternalnameservices=true
- --providers.kubernetescrd.allowexternalnameservices=true
string
deployment.replicas (11)
1
number
deployment.kind (9)
Deployment
string
deployment.enabled (5)
true
boolean
deployment.initContainers[].command[] (1)
- sh
- -c
- chmod -Rv 600 /data/*
string
deployment.initContainers[].image (1)
busybox:1.35.0
string
deployment.initContainers[].name (1)
volume-permissions
string
deployment.initContainers[].volumeMounts[].mountPath (1)
/data
string
deployment.initContainers[].volumeMounts[].name (1)
data
string
deployment.minReadySeconds (1)
0
number
deployment.shareProcessNamespace (1)
false
boolean
deployment.terminationGracePeriodSeconds (1)
60
number
logs.access.enabled (11)
true
boolean
logs.access.format (8)
json
string
logs.access.fields.general.defaultmode (1)
keep
string
logs.access.fields.headers.defaultmode (1)
drop
string
logs.general.level (10)
DEBUG
string
logs.general.format (8)
json
string
tlsOptions.default.maxVersion (11)
VersionTLS13
string
tlsOptions.default.minVersion (11)
VersionTLS12
string
tlsOptions.default.sniStrict (11)
true
boolean
ports.metrics.port (9)
8082
number
ports.metrics.exposedPort (7)
8082
number
ports.metrics.expose.default (3)
true
boolean
ports.metrics.expose.internal (1)
false
boolean
ports.metrics.expose (5)
true
boolean
ports.metrics.protocol (2)
TCP
string
ports.websecure.tls.enabled (9)
true
boolean
ports.websecure.tls.options (9)
default
string
ports.websecure.tls.certResolver (2)

string
ports.websecure.tls.domains[].main (1)
${SECRET_DOMAIN}
${SECRET_DOMAIN_2}
${SECRET_DOMAIN_3}
${SECRET_DOMAIN_4}
string
ports.websecure.tls.domains[].sans[] (1)
- *.${SECRET_DOMAIN}
- *.${SECRET_DOMAIN_2}
- *.${SECRET_DOMAIN_3}
- *.${SECRET_DOMAIN_4}
string
ports.websecure.exposedPort (4)
443
number
ports.websecure.http.tls.enabled (4)
true
boolean
ports.websecure.http.tls.options (4)
default
string
ports.websecure.port (4)
8443
number
ports.websecure.expose (2)
true
boolean
ports.websecure.http3.enabled (2)
true
boolean
ports.websecure.protocol (2)
TCP
string
ports.websecure.containerPort (1)
8443
number
ports.websecure.forwardedHeaders.trustedIPs[] (1)
- "10.0.0.0/8"
- "192.168.0.0/16"
- "172.16.0.0/12"
- "173.245.48.0/20"
- "103.21.244.0/22"
- "103.22.200.0/22"
- "103.31.4.0/22"
- "141.101.64.0/18"
- "108.162.192.0/18"
- "190.93.240.0/20"
- "188.114.96.0/20"
- "197.234.240.0/22"
- "198.41.128.0/17"
- "162.158.0.0/15"
- "104.16.0.0/13"
- "104.24.0.0/14"
- "172.64.0.0/13"
- "131.0.72.0/22"
- "2400:cb00::/32"
- "2606:4700::/32"
- "2803:f800::/32"
- "2405:b500::/32"
- "2405:8100::/32"
- "2a06:98c0::/29"
- "2c0f:f248::/32"
string
ports.websecure.proxyProtocol.trustedIPs[] (1)
- "10.0.0.0/8"
- "192.168.0.0/16"
- "172.16.0.0/12"
- "173.245.48.0/20"
- "103.21.244.0/22"
- "103.22.200.0/22"
- "103.31.4.0/22"
- "141.101.64.0/18"
- "108.162.192.0/18"
- "190.93.240.0/20"
- "188.114.96.0/20"
- "197.234.240.0/22"
- "198.41.128.0/17"
- "162.158.0.0/15"
- "104.16.0.0/13"
- "104.24.0.0/14"
- "172.64.0.0/13"
- "131.0.72.0/22"
- "2400:cb00::/32"
- "2606:4700::/32"
- "2803:f800::/32"
- "2405:b500::/32"
- "2405:8100::/32"
- "2a06:98c0::/29"
- "2c0f:f248::/32"
string
ports.websecure.transport.respondingTimeouts.idleTimeout (1)
3600s
string
ports.websecure.transport.respondingTimeouts.readTimeout (1)
3600s
string
ports.websecure.transport.respondingTimeouts.writeTimeout (1)
3600s
string
ports.traefik.expose.default (3)
true
boolean
ports.traefik.expose (6)
true
boolean
ports.traefik.exposedPort (2)
9000
number
ports.traefik.port (2)
9000
number
ports.traefik.protocol (2)
TCP
string
ports.traefik.http.expose.default (1)
true
boolean
ports.web.redirectTo.port (1)
websecure
string
ports.web.redirectTo (5)
websecure
string
ports.web.port (4)
8000
number
ports.web.http.redirections.entryPoint.permanent (3)
true
boolean
ports.web.http.redirections.entryPoint.scheme (3)
https
string
ports.web.http.redirections.entryPoint.to (3)
websecure
string
ports.web.http.redirections.entrypoint.permanent (1)
true
boolean
ports.web.http.redirections.entrypoint.scheme (1)
https
string
ports.web.http.redirections.entrypoint.to (1)
websecure
string
ports.web.expose (2)
true
boolean
ports.web.exposedPort (2)
80
number
ports.web.protocol (2)
TCP
string
ports.web.redirections.entryPoint.scheme (2)
https
string
ports.web.redirections.entryPoint.to (2)
websecure
string
ports.web.redirections.entryPoint.permanent (1)
true
boolean
ports.web.containerPort (1)
8000
number
ports.factorio-ab.expose (1)
true
boolean
ports.factorio-ab.exposedPort (1)
34198
number
ports.factorio-ab.port (1)
34198
number
ports.factorio-ab.protocol (1)
UDP
string
ports.factorio-v.expose (1)
true
boolean
ports.factorio-v.exposedPort (1)
34197
number
ports.factorio-v.port (1)
34197
number
ports.factorio-v.protocol (1)
UDP
string
ports.mqtt.expose (1)
true
boolean
ports.mqtt.exposedPort (1)
1883
number
ports.mqtt.port (1)
1883
number
ports.mqtt.protocol (1)
TCP
string
ports.mqtt.tls.enabled (1)
false
boolean
ports.mqtts.expose (1)
true
boolean
ports.mqtts.exposedPort (1)
8883
number
ports.mqtts.port (1)
8883
number
ports.mqtts.protocol (1)
TCP
string
ports.mqtts.tls.enabled (1)
false
boolean
ports.openmqtts.expose (1)
true
boolean
ports.openmqtts.exposedPort (1)
8884
number
ports.openmqtts.port (1)
8884
number
ports.openmqtts.protocol (1)
TCP
string
ports.openmqtts.tls.enabled (1)
false
boolean
ports.ssh.expose.default (1)
true
boolean
ports.ssh.exposedPort (1)
22
number
ports.ssh.port (1)
22
number
ports.ssh.protocol (1)
TCP
string
ports.unificaptive.expose (1)
true
boolean
ports.unificaptive.exposedPort (1)
8880
number
ports.unificaptive.port (1)
8881
number
ports.unificaptive.protocol (1)
TCP
string
ports.unificaptives.expose (1)
true
boolean
ports.unificaptives.exposedPort (1)
8843
number
ports.unificaptives.port (1)
8844
number
ports.unificaptives.protocol (1)
TCP
string
ports.unificaptives.tls.enabled (1)
false
boolean
ports.unificontroller.expose (1)
true
boolean
ports.unificontroller.exposedPort (1)
8080
number
ports.unificontroller.port (1)
8080
number
ports.unificontroller.protocol (1)
TCP
string
ports.unifidiscovery.expose (1)
true
boolean
ports.unifidiscovery.exposedPort (1)
10001
number
ports.unifidiscovery.port (1)
10001
number
ports.unifidiscovery.protocol (1)
TCP
string
ports.unifistun.expose (1)
true
boolean
ports.unifistun.exposedPort (1)
3478
number
ports.unifistun.port (1)
3478
number
ports.unifistun.protocol (1)
UDP
string
globalArguments[] (8)
- --api.insecure=true
- --serverstransport.insecureskipverify=true
- --providers.kubernetesingress.ingressclass=traefik
- --metrics.prometheus=true
- --metrics.prometheus.entryPoint=metrics
- --entryPoints.websecure.forwardedHeaders.trustedIPs=10.0.0.0/8,192.168.0.0/16,172.16.0.0/12,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,104.16.0.0/13,104.24.0.0/14,108.162.192.0/18,131.0.72.0/22,141.101.64.0/18,162.158.0.0/15,172.64.0.0/13,173.245.48.0/20,188.114.96.0/20,190.93.240.0/20,197.234.240.0/22,198.41.128.0/17,2400:cb00::/32,2606:4700::/32,2803:f800::/32,2405:b500::/32,2405:8100::/32,2a06:98c0::/29,2c0f:f248::/32
string
providers.kubernetesCRD.allowCrossNamespace (8)
true
boolean
providers.kubernetesCRD.enabled (8)
true
boolean
providers.kubernetesCRD.allowExternalNameServices (7)
true
boolean
providers.kubernetesCRD.allowEmptyServices (2)
false
boolean
providers.kubernetesCRD.ingressClass (1)
traefik
string
providers.kubernetesIngress.enabled (8)
true
boolean
providers.kubernetesIngress.allowExternalNameServices (6)
true
boolean
providers.kubernetesIngress.ingressClass (2)
traefik
string
providers.kubernetesIngress.publishedService.enabled (2)
false
boolean
providers.kubernetesIngress.allowCrossNamespace (1)
true
boolean
providers.kubernetesIngress.allowEmptyServices (1)
false
boolean
providers.kubernetesGateway.enabled (3)
true
boolean
providers.kubernetesGateway.experimentalChannel (1)
true
boolean
resources.limits.memory (8)
500Mi
string
resources.requests.cpu (8)
500m
string
resources.requests.memory (8)
100Mi
string
pilot.enabled (7)
false
boolean
pilot.token (1)

string
experimental.plugins.enabled (5)
false
boolean
experimental.plugins.real-ip.moduleName (1)
github.com/Paxxs/traefik-get-real-ip
string
experimental.plugins.real-ip.version (1)
v1.0.2
string
experimental.http3.enabled (1)
false
boolean
experimental.kubernetesGateway.enabled (1)
false
boolean
rbac.enabled (4)
true
boolean
rbac.namespaced (1)
false
boolean
gateway.listeners.web.namespacePolicy.from (3)
All
string
gateway.listeners.web.port (2)
80
number
gateway.listeners.web.protocol (2)
HTTP
string
gateway.listeners.websecure.certificateRefs[].kind (2)
Secret
string
gateway.listeners.websecure.certificateRefs[].name (2)
${SECRET_PUBLIC_DOMAIN/./-}-tls
string
gateway.listeners.websecure.namespacePolicy.from (2)
All
string
gateway.listeners.websecure.port (2)
443
number
gateway.listeners.websecure.protocol (2)
HTTPS
string
gateway.annotations."external-dns.alpha.kubernetes.io/target" (2)
ipv4.${SECRET_PUBLIC_DOMAIN}
string
gateway.infrastructure.annotations."external-dns.alpha.kubernetes.io/hostname" (2)
ipv4.${SECRET_PUBLIC_DOMAIN}
string
image.repository (3)
traefik
string
image.name (2)
traefik
string
image.pullPolicy (1)
IfNotPresent
string
image.tag (1)
2.7.1
string
metrics.prometheus.entryPoint (3)
metrics
string
metrics.prometheus.disableAPICheck (1)
true
boolean
metrics.prometheus.enabled (1)
true
boolean
metrics.prometheus.prometheusRule.enabled (1)
true
boolean
metrics.prometheus.prometheusRule.rules[].alert (1)
TraefikDown
string
metrics.prometheus.prometheusRule.rules[].annotations.description (1)
{{ $labels.pod }} on {{ $labels.nodename }} is down
string
metrics.prometheus.prometheusRule.rules[].annotations.summary (1)
Traefik Down
string
metrics.prometheus.prometheusRule.rules[].expr (1)
up{job="traefik"} == 0
string
metrics.prometheus.prometheusRule.rules[].for (1)
5m
string
metrics.prometheus.prometheusRule.rules[].labels.context (1)
traefik
string
metrics.prometheus.prometheusRule.rules[].labels.severity (1)
warning
string
metrics.prometheus.service.enabled (1)
true
boolean
metrics.prometheus.serviceMonitor.enabled (1)
true
boolean
metrics.prometheus.serviceMonitor.honorLabels (1)
true
boolean
metrics.prometheus.serviceMonitor.jobLabel (1)
traefik
string
metrics.prometheus.serviceMonitor.metricRelabelings[].action (1)
drop
string
metrics.prometheus.serviceMonitor.metricRelabelings[].regex (1)
^fluentd_output_status_buffer_(oldest|newest)_.+
string
metrics.prometheus.serviceMonitor.metricRelabelings[].replacement (1)
$1
string
metrics.prometheus.serviceMonitor.metricRelabelings[].separator (1)
;
string
metrics.prometheus.serviceMonitor.metricRelabelings[].sourceLabels[] (1)
- __name__
string
metrics.prometheus.serviceMonitor.relabelings[].action (1)
replace
string
metrics.prometheus.serviceMonitor.relabelings[].regex (1)
^(.*)$
string
metrics.prometheus.serviceMonitor.relabelings[].replacement (1)
$1
string
metrics.prometheus.serviceMonitor.relabelings[].separator (1)
;
string
metrics.prometheus.serviceMonitor.relabelings[].sourceLabels[] (1)
- __meta_kubernetes_pod_node_name
string
metrics.prometheus.serviceMonitor.relabelings[].targetLabel (1)
nodename
string
metrics.prometheus.serviceMonitor.scrapeInterval (1)
30s
string
metrics.prometheus.serviceMonitor.scrapeTimeout (1)
5s
string
rollingUpdate.maxSurge (3)
1
number
rollingUpdate.maxUnavailable (3)
1
number
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (2)
kubernetes.io/hostname
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].key (1)
app.kubernetes.io/name
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].operator (1)
In
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].values[] (1)
- traefik
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
{{ .Release.Name }}-{{ .Release.Namespace }}
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
{{ template "traefik.name" . }}
string
autoscaling.enabled (2)
true
boolean
autoscaling.behavior.scaleDown.policies[].periodSeconds (1)
60
number
autoscaling.behavior.scaleDown.policies[].type (1)
Pods
string
autoscaling.behavior.scaleDown.policies[].value (1)
1
number
autoscaling.behavior.scaleDown.stabilizationWindowSeconds (1)
300
number
autoscaling.maxReplicas (1)
2
number
autoscaling.metrics[].resource.name (1)
memory
string
autoscaling.metrics[].resource.target.averageUtilization (1)
95
number
autoscaling.metrics[].resource.target.type (1)
Utilization
string
autoscaling.metrics[].type (1)
Resource
string
autoscaling.minReplicas (1)
1
number
env[].name (2)
TZ
string
env[].value (2)
${CLUSTER_TIMEZONE}
string
env[].valueFrom.secretKeyRef.key (1)
CLOUDFLARE_API_KEY
string
env[].valueFrom.secretKeyRef.name (1)
home-secrets
string
persistence.enabled (2)
false
boolean
persistence.path (2)
/certs
string
persistence.size (2)
128Mi
string
persistence.accessMode (1)
ReadWriteOnce
string
persistence.name (1)
data
string
persistence.storageClass (1)
filesystem
string
podSecurityContext.fsGroup (2)
65532
number
securityContext.capabilities.drop[] (2)
- ALL
string
securityContext.readOnlyRootFilesystem (2)
true
boolean
securityContext.runAsGroup (2)
65532
number
securityContext.runAsNonRoot (2)
true
boolean
securityContext.runAsUser (2)
65532
number
tlsStore.default.defaultCertificate.secretName (2)
${SECRET_PUBLIC_DOMAIN/./-}-tls
string
certResolvers.letsencrypt.dnsChallenge.delayBeforeCheck (1)
30
number
certResolvers.letsencrypt.dnsChallenge.provider (1)
cloudflare
string
certResolvers.letsencrypt.dnsChallenge.resolvers[] (1)
- "1.1.1.1"
- "8.8.8.8"
string
certResolvers.letsencrypt.email (1)
nick@shoresmedia.com
string
certResolvers.letsencrypt.storage (1)
/data/acme.json
string
certResolvers.letsencrypt.tlsChallenge (1)
false
boolean
global.checkNewVersion (1)
false
boolean
global.sendAnonymousUsage (1)
false
boolean
hostNetwork (1)
false
boolean
livenessProbe.failureThreshold (1)
3
number
livenessProbe.initialDelaySeconds (1)
10
number
livenessProbe.periodSeconds (1)
10
number
livenessProbe.successThreshold (1)
1
number
livenessProbe.timeoutSeconds (1)
2
number
nodeSelector.location (1)
on-prem
string
podDisruptionBudget.enabled (1)
false
boolean
podSecurityPolicy.enabled (1)
false
boolean
priorityClassName (1)

string
readinessProbe.failureThreshold (1)
1
number
readinessProbe.initialDelaySeconds (1)
10
number
readinessProbe.periodSeconds (1)
10
number
readinessProbe.successThreshold (1)
1
number
readinessProbe.timeoutSeconds (1)
2
number
serviceAccount.name (1)

string
topologySpreadConstraints[].labelSelector.matchLabels.app (1)
{{ template "traefik.name" . }}
string
topologySpreadConstraints[].maxSkew (1)
1
number
topologySpreadConstraints[].topologyKey (1)
kubernetes.io/hostname
string
topologySpreadConstraints[].whenUnsatisfiable (1)
DoNotSchedule
string
updateStrategy.rollingUpdate.maxUnavailable (1)
1
number
volumes[].mountPath (1)
/data
string
volumes[].name (1)
traefik-config
string
volumes[].type (1)
configMap
string