Traefik is a HTTP reverse proxy and load balancer for microservices. It integrates with popular orchestration systems, such as Kubernetes, to provide seamless and automatic service discovery, load balancing, and proxying for your applications. Traefik is designed to be fast, efficient, and easy to use, making it a good solution for home lab environments. With Traefik, you can expose your applications to the internet with ease, providing remote access to your services from anywhere. Whether you're looking to host a personal website, run a web-based service, or simply provide external access to your applications.
Install with:
helm repo add traefik-charts https://helm.traefik.io/traefik/
helm install traefik traefik-charts/traefik -f values.yamlSee examples from other people.
| Name | Repo | Stars | Version | Timestamp |
|---|---|---|---|---|
| traefik | xunholy/k8s-gitops | 449 | 26.1.0 | 8 days ago |
| traefik | h3mmy/bloopySphere | 50 | 26.1.0 | 2 months ago |
| traefik | dfroberg/cluster | 57 | 14.0.1 | a year ago |
See the most popular values for this chart:
| Key | Types |
|---|---|
| boolean | |
globalArguments[] (22) - --api.insecure=true | string |
| boolean | |
| boolean | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| boolean | |
logs.access.filters.statuscodes (1) 200,300-302 | string |
| string | |
| string | |
| boolean | |
| string | |
| string | |
ports.websecure.tls.domains[].main (2) ${XYZ_DOMAIN} | string |
ports.websecure.tls.domains[].sans[] (2) - *.${XYZ_DOMAIN} | string |
ports.websecure.tls.domains[].bloop (1) ${SECRET_DOMAIN} | string |
ports.websecure.tls.domains[].lilj (1) ${LILJ_DOMAIN} | string |
ports.websecure.tls.domains[].tyg3r (1) ${TGR_DOMAIN} | string |
ports.websecure.tls.stores (2) networking-default@kubernetescrd | string |
| number | |
| boolean | |
| number | |
| boolean | |
| string | |
ports.websecure.forwardedHeaders.trustedIPs[] (2) - "10.0.0.0/8" | string |
| boolean | |
| boolean | |
ports.websecure.middlewares[] (1) - networking-error-pages@kubernetescrd | string |
ports.websecure.trustedIPs[] (1) - ${CALICO_NODE_CIDR} | string |
| number | |
| number | |
| boolean | |
| boolean | |
| boolean | |
| string | |
| boolean | |
| boolean | |
| number | |
| number | |
| string | |
ports.web.redirectTo.port (11) websecure | string |
| number | |
ports.web.redirectTo (11) websecure | string |
| number | |
| boolean | |
| number | |
| string | |
| number | |
| boolean | |
| number | |
| number | |
| boolean | |
| string | |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| boolean | |
ports.ldaps.tls.options (1) default | string |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| boolean | |
ports.mqtts.tls.options (1) default | string |
| boolean | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| boolean | |
| number | |
| number | |
| boolean | |
ports.wss.tls.options (1) default | string |
additionalArguments[] (21) - --providers.kubernetesingress.ingressendpoint.ip=${METALLB_TRAEFIK_ADDR} | string |
| boolean | |
service.type (21) LoadBalancer | string |
| string | |
service.spec.loadBalancerIP (14) ${METALLB_TRAEFIK_ADDR} | string |
service.spec.externalIPs[] (1) - ${CLUSTER_LB_TRAEFIK} | string |
| string | |
service.annotations."metallb.universe.tf/loadBalancerIPs" (5) ${LB_TRAEFIK_ADDR} | string |
service.annotations."external-dns.alpha.kubernetes.io/hostname" (2) ipv4.${SECRET_DOMAIN} | string |
service.annotations."io.cilium/lb-ipam-ips" (2) ${LB_TRAEFIK} | string |
service.annotations."metallb.universe.tf/loadBalancerIP" (1) ${LB_TRAEFIK_ADDRESS} | string |
| string | |
service.ipFamilies[] (2) - IPv4 | string |
service.ipFamilyPolicy (2) RequireDualStack | string |
service.loadBalancerIPs[] (2) - ${LB_IP} | string |
service.single (2) false | boolean |
tlsOptions.default.minVersion (21) VersionTLS12 | string |
tlsOptions.default.maxVersion (20) VersionTLS13 | string |
| boolean | |
tlsOptions.default.cipherSuites[] (3) - TLS_ECDHE_ECDSA_WITH_RC4_128_SHA | string |
tlsOptions.default.curvePreferences[] (2) - X25519 | string |
| boolean | |
tlsOptions.plex.maxVersion (1) VersionTLS13 | string |
tlsOptions.plex.minVersion (1) VersionTLS12 | string |
| string | |
| string | |
| string | |
| number | |
deployment.kind (18) Deployment | string |
| boolean | |
deployment.initContainers[].command[] (1) - sh | string |
deployment.initContainers[].image (1) busybox:1.35.0 | string |
deployment.initContainers[].name (1) volume-permissions | string |
| string | |
| string | |
| number | |
| boolean | |
| number | |
pilot.enabled (19) false | boolean |
| string | |
| boolean | |
experimental.plugins.bouncer.moduleName (1) github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin | string |
| string | |
experimental.plugins.ldapAuth.moduleName (1) github.com/wiltonsr/ldapAuth | string |
| string | |
experimental.plugins.real-ip.moduleName (1) github.com/Paxxs/traefik-get-real-ip | string |
| string | |
experimental.plugins.themepark.moduleName (1) github.com/packruler/traefik-themepark | string |
| string | |
| boolean | |
| boolean | |
| boolean | |
image.name (12) traefik | string |
image.tag (5) 2.5.6 | string |
image.pullPolicy (2) IfNotPresent | string |
image.repository (2) traefik | string |
| boolean | |
| boolean | |
| boolean | |
| boolean | |
| string | |
| boolean | |
| boolean | |
| boolean | |
| string | |
| boolean | |
| boolean | |
providers.kubernetesIngress.ingressEndpoint.ip (1) ${TRAEFIK_IP} | string |
| string | |
| string | |
| string | |
| string | |
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/instance" (1) {{ .Release.Name }}-{{ .Release.Namespace }} | string |
| string | |
| string | |
| string | |
| string | |
| string | |
| number | |
| string | |
| string | |
| string | |
| string | |
metrics.prometheus.prometheusRule.namespace (2) network-system | string |
| string | |
metrics.prometheus.prometheusRule.rules[].annotations.description (2) {{ $labels.pod }} on {{ $labels.nodename }} is down | string |
| string | |
metrics.prometheus.prometheusRule.rules[].expr (2) up{job="traefik"} == 0 | string |
| string | |
| string | |
| string | |
| boolean | |
| boolean | |
| string | |
| string | |
metrics.prometheus.serviceMonitor.metricRelabelings[].regex (2) ^fluentd_output_status_buffer_(oldest|newest)_.+ | string |
| string | |
| string | |
| string | |
metrics.prometheus.serviceMonitor.namespace (2) network-system | string |
| string | |
| string | |
| string | |
| string | |
metrics.prometheus.serviceMonitor.relabelings[].sourceLabels[] (2) - __meta_kubernetes_pod_node_name | string |
| string | |
| string | |
| string | |
| string | |
| boolean | |
| boolean | |
| boolean | |
| number | |
| number | |
| string | |
tlsStore.default.certificates[].secretName (1) wildcard-tls | string |
| string | |
env[].value (2) ${TIMEZONE} | string |
env[].valueFrom.secretKeyRef.key (1) CLOUDFLARE_API_KEY | string |
env[].valueFrom.secretKeyRef.name (1) home-secrets | string |
| boolean | |
persistence.path (2) /certs | string |
persistence.size (2) 128Mi | string |
persistence.accessMode (1) ReadWriteOnce | string |
| string | |
persistence.storageClass (1) filesystem | string |
rbac.enabled (2) true | boolean |
rbac.namespaced (1) false | boolean |
tolerations[].key (2) node.kubernetes.io/not-ready | string |
tolerations[].operator (2) Exists | string |
tolerations[].effect (1) NoExecute | string |
| number | |
volumes[].mountPath (2) /etc/traefik/crowdsec-certs/ | string |
volumes[].name (2) crowdsec-bouncer-tls | string |
volumes[].type (2) secret | string |
| number | |
| string | |
certResolvers.letsencrypt.dnsChallenge.resolvers[] (1) - "1.1.1.1" | string |
certResolvers.letsencrypt.email (1) nick@shoresmedia.com | string |
certResolvers.letsencrypt.storage (1) /data/acme.json | string |
| boolean | |
fullnameOverride (1) traefik | string |
hostNetwork (1) false | boolean |
| number | |
| number | |
| number | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| number | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| boolean | |
| number | |
| string |