traefik helm

Traefik is a HTTP reverse proxy and load balancer for microservices. It integrates with popular orchestration systems, such as Kubernetes, to provide seamless and automatic service discovery, load balancing, and proxying for your applications. Traefik is designed to be fast, efficient, and easy to use, making it a good solution for home lab environments. With Traefik, you can expose your applications to the internet with ease, providing remote access to your services from anywhere. Whether you're looking to host a personal website, run a web-based service, or simply provide external access to your applications.

More popular helm chart found

traefik from helm.traefik is more popular with 15 repositories.

Install

Install with:

helm repo add traefik https://traefik.github.io/charts/
helm install traefik traefik/traefik -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 11)

NameRepoStarsVersionTimestamp
traefikh3mmy/bloopySphere6337.4.02 months ago
traefikqjoly/GitOps9336.3.04 months ago
traefikqjoly/GitOps9336.3.06 months ago

Values

See the most popular values for this chart:

KeyTypes
service.enabled (6)
true
boolean
service.type (6)
LoadBalancer
string
service.spec.externalTrafficPolicy (3)
Local
string
service.spec.loadBalancerIP (3)
${TRAEFIK_EXTERNAL_IP}
string
service.ipFamilies[] (2)
- IPv4
- IPv6
string
service.annotations."external-dns.alpha.kubernetes.io/hostname" (1)
internal.${SECRET_DOMAIN}
string
service.annotations."lbipam.cilium.io/sharing-cross-namespace" (1)
*
string
service.annotations."lbipam.cilium.io/sharing-key" (1)
public
string
service.annotations."metallb.io/allow-shared-ip" (1)
traefik
string
service.annotations."metallb.io/loadBalancerIPs" (1)
${LB_V4_TRAEFIK}, ${LB_V6_TRAEFIK}
string
service.externalTrafficPolicy (1)
Local
string
service.ipFamilyPolicy (1)
PreferDualStack
string
service.loadBalancerIPs[] (1)
- ${LB_V4_TRAEFIK}
- ${LB_V6_TRAEFIK}
string
additionalArguments[] (5)
- --serverstransport.insecureskipverify
string
logs.general.level (5)
DEBUG
string
logs.general.format (3)
json
string
logs.access.enabled (4)
true
boolean
logs.access.fields.headers.defaultmode (3)
keep
string
logs.access.fields.headers.names.Authorization (1)
drop
string
logs.access.fields.general.names.ClientAddr (1)
keep
string
logs.access.fields.general.names.defaultmode (1)
drop
string
logs.access.fields.general.names.Duration (1)
keep
string
logs.access.fields.general.names.RequestAddr (1)
keep
string
logs.access.fields.general.names.RequestCount (1)
keep
string
logs.access.fields.general.names.RequestMethod (1)
keep
string
logs.access.fields.general.names.RequestPath (1)
keep
string
logs.access.fields.general.names.RequestProtocol (1)
keep
string
logs.access.fields.general.names.RequestScheme (1)
keep
string
logs.access.fields.general.names.RetryAttempts (1)
keep
string
logs.access.fields.general.names.RouterName (1)
keep
string
logs.access.format (3)
json
string
logs.access.bufferingSize (1)
100
number
logs.access.filePath (1)
/data/log/traefik/access.log
string
logs.access.filters.minduration (1)
450000ns
string
logs.access.filters.retryattempts (1)
true
boolean
logs.access.filters.statuscodes (1)
200,300-302
string
metrics.prometheus.serviceMonitor.enabled (5)
true
boolean
metrics.prometheus.serviceMonitor.honorLabels (2)
true
boolean
metrics.prometheus.serviceMonitor.jobLabel (2)
traefik
string
metrics.prometheus.serviceMonitor.metricRelabelings[].action (2)
drop
string
metrics.prometheus.serviceMonitor.metricRelabelings[].regex (2)
^fluentd_output_status_buffer_(oldest|newest)_.+
string
metrics.prometheus.serviceMonitor.metricRelabelings[].replacement (2)
$1
string
metrics.prometheus.serviceMonitor.metricRelabelings[].separator (2)
;
string
metrics.prometheus.serviceMonitor.metricRelabelings[].sourceLabels[] (2)
- __name__
string
metrics.prometheus.serviceMonitor.relabelings[].action (2)
replace
string
metrics.prometheus.serviceMonitor.relabelings[].regex (2)
^(.*)$
string
metrics.prometheus.serviceMonitor.relabelings[].replacement (2)
$1
string
metrics.prometheus.serviceMonitor.relabelings[].separator (2)
;
string
metrics.prometheus.serviceMonitor.relabelings[].sourceLabels[] (2)
- __meta_kubernetes_pod_node_name
string
metrics.prometheus.serviceMonitor.relabelings[].targetLabel (2)
nodename
string
metrics.prometheus.serviceMonitor.additionalLabels.foo (1)
bar
string
metrics.prometheus.serviceMonitor.interval (1)
30s
string
metrics.prometheus.serviceMonitor.namespace (1)
networking
string
metrics.prometheus.serviceMonitor.scrapeInterval (1)
30s
string
metrics.prometheus.serviceMonitor.scrapeTimeout (1)
5s
string
metrics.prometheus.service.enabled (3)
true
boolean
metrics.prometheus.entryPoint (2)
metrics
string
metrics.prometheus.prometheusRule.enabled (2)
true
boolean
metrics.prometheus.prometheusRule.rules[].alert (2)
TraefikDown
string
metrics.prometheus.prometheusRule.rules[].annotations.description (2)
{{ $labels.pod }} on {{ $labels.nodename }} is down
string
metrics.prometheus.prometheusRule.rules[].annotations.summary (2)
Traefik Down
string
metrics.prometheus.prometheusRule.rules[].expr (2)
up{job="traefik"} == 0
string
metrics.prometheus.prometheusRule.rules[].for (2)
5m
string
metrics.prometheus.prometheusRule.rules[].labels.context (2)
traefik
string
metrics.prometheus.prometheusRule.rules[].labels.severity (2)
warning
string
metrics.prometheus.prometheusRule.namespace (1)
networking
string
metrics.prometheus.disableAPICheck (1)
false
boolean
metrics.prometheus.enabled (1)
true
boolean
providers.kubernetesCRD.allowCrossNamespace (5)
true
boolean
providers.kubernetesCRD.enabled (5)
true
boolean
providers.kubernetesCRD.allowExternalNameServices (4)
true
boolean
providers.kubernetesCRD.allowEmptyServices (1)
false
boolean
providers.kubernetesCRD.ingressClass (1)
traefik-external
string
providers.kubernetesIngress.enabled (5)
true
boolean
providers.kubernetesIngress.allowExternalNameServices (3)
true
boolean
providers.kubernetesIngress.publishedService.enabled (3)
true
boolean
providers.kubernetesIngress.allowEmptyServices (2)
true
boolean
providers.kubernetesIngress.ingressClass (1)
traefik
string
providers.kubernetesGateway.enabled (2)
true
boolean
providers.kubernetesGateway.experimentalChannel (1)
true
boolean
deployment.kind (4)
Deployment
string
deployment.replicas (4)
2
number
deployment.enabled (2)
true
boolean
ingressRoute.dashboard.enabled (4)
false
boolean
globalArguments[] (3)
- --global.checknewversion=true
- --global.sendanonymoususage=false
string
ingressClass.enabled (3)
true
boolean
ingressClass.isDefaultClass (3)
true
boolean
ingressClass.fallbackApiVersion (1)
v1
string
ingressClass.name (1)
traefik
string
ports.metrics.expose.default (3)
true
boolean
ports.metrics.exposedPort (3)
8082
number
ports.metrics.port (3)
8082
number
ports.web.exposedPort (3)
80
number
ports.web.port (3)
8000
number
ports.web.protocol (3)
TCP
string
ports.web.expose.default (2)
true
boolean
ports.web.expose (1)
true
boolean
ports.web.redirections.entryPoint.scheme (2)
https
string
ports.web.redirections.entryPoint.to (2)
websecure
string
ports.web.redirections.entryPoint.permanent (1)
true
boolean
ports.web.redirections.entryPoint.priority (1)
10
number
ports.web.redirections.entrypoint.permanent (1)
true
boolean
ports.web.redirections.entrypoint.scheme (1)
https
string
ports.web.redirections.entrypoint.to (1)
websecure
string
ports.websecure.exposedPort (3)
443
number
ports.websecure.port (3)
8443
number
ports.websecure.protocol (3)
TCP
string
ports.websecure.tls.enabled (3)
true
boolean
ports.websecure.tls.options (2)
default
string
ports.websecure.tls.domains[].bloop (1)
${SECRET_DOMAIN}
string
ports.websecure.tls.domains[].lilj (1)
${LILJ_DOMAIN}
string
ports.websecure.tls.domains[].main (1)
${XYZ_DOMAIN}
string
ports.websecure.tls.domains[].sans[] (1)
- *.${XYZ_DOMAIN}
- *.${SECRET_DOMAIN}
- *.${TGR_DOMAIN}
- *.${LILJ_DOMAIN}
string
ports.websecure.tls.domains[].tyg3r (1)
${TGR_DOMAIN}
string
ports.websecure.tls.stores (1)
networking-default@kubernetescrd
string
ports.websecure.expose.default (2)
true
boolean
ports.websecure.expose.internal (1)
true
boolean
ports.websecure.expose (1)
true
boolean
ports.websecure.forwardedHeaders.trustedIPs[] (2)
- "10.42.0.0/16"
- "10.43.0.0/16"
- "10.168.2.0/24"
string
ports.websecure.http3.enabled (2)
true
boolean
ports.websecure.proxyProtocol.trustedIPs[] (2)
- "10.42.0.0/16"
- "10.43.0.0/16"
- "10.168.2.0/24"
string
ports.websecure.insecure (1)
false
boolean
ports.websecure.middlewares[] (1)
- network-errors@kubernetescrd
- network-blockuseragent@kubernetescrd
string
ports.websecure.respondingTimeouts.idleTimeout (1)
600s
string
ports.websecure.respondingTimeouts.readTimeout (1)
600s
string
ports.websecure.respondingTimeouts.writeTimeout (1)
600s
string
ports.websecure.transport.keepAliveMaxRequests (1)
100
number
ports.websecure.transport.keepAliveMaxTime (1)
300
number
ports.websecure.transport.lifeCycle.graceTimeOut (1)
300
number
ports.websecure.transport.lifeCycle.requestAcceptGraceTimeout (1)
300
number
ports.websecure.transport.respondingTimeouts.idleTimeout (1)
300
number
ports.websecure.transport.respondingTimeouts.readTimeout (1)
300
number
ports.websecure.transport.respondingTimeouts.writeTimeout (1)
300
number
ports.websecure.trustedIPs[] (1)
- ${CALICO_NODE_CIDR}
- ${CALICO_NODE_CIDR_IPV6}
- ${LOCAL_CIDR_1}
- ${LOCAL_CIDR_2}
- ${LOCAL_GATEWAY_MAIN}
- ${LOCAL_GATEWAY_BGP}
- ${LOCAL_GATEWAY_CORE_BLOOP}
- ${NETWORK_K8S_CLUSTER_CIDR}
- ${NETWORK_K8S_CLUSTER_CIDR_V6}
- ${NETWORK_K8S_SERVICE_CIDR}
- ${NETWORK_K8S_SERVICE_CIDR_V6}
- ${NETWORK_BGP_BLOCK_V4}
- ${NETWORK_BGP_BLOCK_V6}
- "172.16.0.0/12"
- "103.21.244.0/22"
- "103.22.200.0/22"
- "103.31.4.0/22"
- "104.16.0.0/13"
- "104.24.0.0/14"
- "108.162.192.0/18"
- "131.0.72.0/22"
- "141.101.64.0/18"
- "162.158.0.0/15"
- "172.64.0.0/13"
- "173.245.48.0/20"
- "188.114.96.0/20"
- "190.93.240.0/20"
- "197.234.240.0/22"
- "198.41.128.0/17"
- "2400:cb00::/32"
- "2606:4700::/32"
- "2803:f800::/32"
- "2405:b500::/32"
- "2405:8100::/32"
- "2a06:98c0::/29"
- "2c0f:f248::/32"
string
ports.mqtts.expose.default (2)
true
boolean
ports.mqtts.exposedPort (2)
8883
number
ports.mqtts.port (2)
8183
number
ports.mqtts.protocol (1)
TCP
string
ports.mqtts.tls.enabled (1)
true
boolean
ports.mqtts.tls.options (1)
default
string
ports.traefik.expose.default (2)
true
boolean
ports.traefik.expose (1)
false
boolean
ports.traefik.port (2)
8080
number
ports.traefik.protocol (2)
TCP
string
ports.traefik.exposedPort (1)
8080
number
ports.coap.expose.default (1)
true
boolean
ports.coap.exposedPort (1)
5683
number
ports.coap.port (1)
5683
number
ports.coap.protocol (1)
UDP
string
ports.dns-tls.expose.default (1)
true
boolean
ports.dns-tls.exposedPort (1)
853
number
ports.dns-tls.port (1)
8853
number
ports.dns-tls.tls.enabled (1)
true
boolean
ports.dns-tls.tls.options (1)
default
string
ports.ldaps.expose.default (1)
true
boolean
ports.ldaps.exposedPort (1)
636
number
ports.ldaps.port (1)
8636
number
ports.ldaps.tls.enabled (1)
true
boolean
ports.ldaps.tls.options (1)
default
string
ports.mqtt.expose.default (1)
true
boolean
ports.mqtt.exposedPort (1)
1883
number
ports.mqtt.port (1)
1883
number
ports.mqtt.protocol (1)
TCP
string
ports.postgres.expose.default (1)
true
boolean
ports.postgres.expostedPort (1)
5432
number
ports.postgres.port (1)
5432
number
ports.postgres.tls.enabled (1)
false
boolean
ports.wss.expose.default (1)
true
boolean
ports.wss.exposedPort (1)
8084
number
ports.wss.port (1)
8284
number
ports.wss.tls.enabled (1)
true
boolean
ports.wss.tls.options (1)
default
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].key (2)
app.kubernetes.io/name
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].operator (2)
In
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].values[] (2)
- traefik
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (2)
kubernetes.io/hostname
string
env[].name (2)
TZ
string
env[].value (2)
${TIMEZONE}
string
image.repository (2)
traefik
string
image.registry (1)
public.ecr.aws
string
image.tag (1)
2.11.0
string
pilot.enabled (2)
false
boolean
resources.limits.memory (2)
742M
string
resources.requests.cpu (2)
15m
string
resources.requests.memory (2)
110M
string
api.disabledashboardad (1)
true
boolean
dnsPolicy (1)
ClusterFirst
string
experimental.abortOnPluginFailure (1)
true
boolean
experimental.plugins.traefik-plugin-blockuseragent.moduleName (1)
github.com/agence-gaya/traefik-plugin-blockuseragent
string
experimental.plugins.traefik-plugin-blockuseragent.version (1)
v0.1.7
string
extraObjects[].apiVersion (1)
v1
string
extraObjects[].kind (1)
Service
string
extraObjects[].metadata.name (1)
traefik-api
string
extraObjects[].spec.ports[].name (1)
traefik
string
extraObjects[].spec.ports[].port (1)
8080
number
extraObjects[].spec.ports[].protocol (1)
TCP
string
extraObjects[].spec.ports[].targetPort (1)
8080
number
extraObjects[].spec.selector."app.kubernetes.io/instance" (1)
traefik-default
string
extraObjects[].spec.selector."app.kubernetes.io/name" (1)
traefik
string
extraObjects[].spec.type (1)
ClusterIP
string
gateway.listeners.web.namespacePolicy.from (1)
All
string
gateway.listeners.web.port (1)
8000
number
gateway.listeners.web.protocol (1)
HTTP
string
gateway.listeners.websecure.certificateRefs[].kind (1)
Secret
string
gateway.listeners.websecure.certificateRefs[].name (1)
tls.${XYZ_DOMAIN/./-}
string
gateway.listeners.websecure.namespacePolicy.from (1)
All
string
gateway.listeners.websecure.port (1)
8443
number
gateway.listeners.websecure.protocol (1)
HTTPS
string
gateway.name (1)
traefik
string
persistence.enabled (1)
true
boolean
persistence.storageClass (1)
local-path
string
podSecurityPolicy.enabled (1)
false
boolean
rbac.enabled (1)
true
boolean
tlsOptions.default.maxVersion (1)
VersionTLS13
string
tlsOptions.default.minVersion (1)
VersionTLS12
string
tlsOptions.default.sniStrict (1)
true
boolean
tlsOptions.plex.maxVersion (1)
VersionTLS13
string
tlsOptions.plex.minVersion (1)
VersionTLS12
string
tlsStore.default.defaultCertificate.secretName (1)
external-default-tls
string
tracing.addInternals (1)
true
boolean