traefik helm

Traefik is a HTTP reverse proxy and load balancer for microservices. It integrates with popular orchestration systems, such as Kubernetes, to provide seamless and automatic service discovery, load balancing, and proxying for your applications. Traefik is designed to be fast, efficient, and easy to use, making it a good solution for home lab environments. With Traefik, you can expose your applications to the internet with ease, providing remote access to your services from anywhere. Whether you're looking to host a personal website, run a web-based service, or simply provide external access to your applications.

More popular helm chart found

traefik from helm.traefik is more popular with 26 repositories.

Install

Install with:

helm repo add traefik https://traefik.github.io/charts/
helm install traefik traefik/traefik -f values.yaml

Examples

See examples from other people.

Top Repositories (1 out of 7)

NameRepoStarsVersionTimestamp
traefikpascaliske/infrastructure6133.0.08 days ago

Values

See the most popular values for this chart:

KeyTypes
additionalArguments[] (5)
- --providers.kubernetescrd.allowexternalnameservices=true
string
logs.access.enabled (5)
true
boolean
logs.access.filters.statuscodes (1)
400-599
string
logs.access.format (1)
json
string
logs.general.level (4)
INFO
string
logs.general.format (1)
json
string
providers.kubernetesCRD.allowCrossNamespace (5)
true
boolean
providers.kubernetesCRD.enabled (4)
true
boolean
providers.kubernetesCRD.allowExternalNameServices (3)
true
boolean
providers.kubernetesCRD.allowEmptyServices (1)
true
boolean
providers.kubernetesCRD.ingressClass (1)
traefik-external
string
providers.kubernetesGateway.enabled (3)
true
boolean
providers.kubernetesGateway.experimentalChannel (3)
true
boolean
providers.kubernetesIngress.allowExternalNameServices (1)
true
boolean
providers.kubernetesIngress.enabled (1)
true
boolean
providers.kubernetesIngress.publishedService.enabled (1)
false
boolean
tlsOptions.default.minVersion (5)
VersionTLS12
string
tlsOptions.default.sniStrict (5)
true
boolean
tlsOptions.default.maxVersion (3)
VersionTLS13
string
tlsOptions.default.cipherSuites[] (1)
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
string
deployment.replicas (4)
3
number
deployment.enabled (3)
true
boolean
deployment.kind (2)
Deployment
string
deployment.healthchecksPort (1)
9100
number
globalArguments[] (4)
- --global.checknewversion
string
service.enabled (4)
true
boolean
service.spec.externalTrafficPolicy (4)
Local
string
service.spec.loadBalancerIP (2)
${TRAEFIK_EXTERNAL_IP}
string
service.type (4)
LoadBalancer
string
service.annotations."external-dns.alpha.kubernetes.io/hostname" (2)
external.${SECRET_DOMAIN_DIVING}, external.${SECRET_DOMAIN_WIFE}
string
service.annotations."lbipam.cilium.io/ips" (2)
${EXTERNAL_TRAEFIK_VIP_GATEWAY}
string
service.ipFamilyPolicy (1)
PreferDualStack
string
tlsStore.default.defaultCertificate.secretName (4)
${SECRET_DOMAIN_DIVING/./-}-production-tls
string
gateway.enabled (3)
true
boolean
gateway.listeners.websecure.mode (3)
Passthrough
string
gateway.listeners.websecure.port (3)
8443
number
gateway.listeners.websecure.protocol (3)
TLS
string
gateway.listeners.websecure.namespacePolicy (2)
All
string
gateway.listeners.websecure.certificateRefs[].name (1)
${PUBLIC_DOMAIN0/./-}-production-tls
string
gateway.listeners.websecure.hostname (1)
${PUBLIC_DOMAIN0}
string
gateway.listeners.web.namespacePolicy (2)
All
string
gateway.listeners.web.port (2)
8000
number
gateway.listeners.web.protocol (2)
HTTP
string
gateway.name (2)
traefik-gateway
string
gateway.namespace (2)
network
string
ingressRoute.dashboard.enabled (3)
true
boolean
metrics.prometheus.service.enabled (3)
true
boolean
metrics.prometheus.serviceMonitor.enabled (3)
true
boolean
metrics.prometheus.serviceMonitor.honorLabels (1)
true
boolean
metrics.prometheus.serviceMonitor.interval (1)
30s
string
metrics.prometheus.serviceMonitor.jobLabel (1)
traefik
string
metrics.prometheus.serviceMonitor.metricRelabelings[].action (1)
drop
string
metrics.prometheus.serviceMonitor.metricRelabelings[].regex (1)
^fluentd_output_status_buffer_(oldest|newest)_.+
string
metrics.prometheus.serviceMonitor.metricRelabelings[].replacement (1)
$1
string
metrics.prometheus.serviceMonitor.metricRelabelings[].separator (1)
;
string
metrics.prometheus.serviceMonitor.metricRelabelings[].sourceLabels[] (1)
- __name__
string
metrics.prometheus.serviceMonitor.namespace (1)
traefik
string
metrics.prometheus.serviceMonitor.relabelings[].action (1)
replace
string
metrics.prometheus.serviceMonitor.relabelings[].regex (1)
^(.*)$
string
metrics.prometheus.serviceMonitor.relabelings[].replacement (1)
$1
string
metrics.prometheus.serviceMonitor.relabelings[].separator (1)
;
string
metrics.prometheus.serviceMonitor.relabelings[].sourceLabels[] (1)
- __meta_kubernetes_pod_node_name
string
metrics.prometheus.serviceMonitor.relabelings[].targetLabel (1)
nodename
string
metrics.prometheus.entryPoint (2)
metrics
string
metrics.prometheus.prometheusRule.enabled (2)
false
boolean
metrics.prometheus.prometheusRule.namespace (1)
traefik
string
metrics.prometheus.prometheusRule.rules[].alert (1)
TraefikDown
string
metrics.prometheus.prometheusRule.rules[].annotations.description (1)
{{ $labels.pod }} on {{ $labels.nodename }} is down
string
metrics.prometheus.prometheusRule.rules[].annotations.summary (1)
Traefik Down
string
metrics.prometheus.prometheusRule.rules[].expr (1)
up{job="traefik"} == 0
string
metrics.prometheus.prometheusRule.rules[].for (1)
5m
string
metrics.prometheus.prometheusRule.rules[].labels.context (1)
traefik
string
metrics.prometheus.prometheusRule.rules[].labels.severity (1)
warning
string
metrics.prometheus.disableAPICheck (1)
true
boolean
metrics.prometheus.enabled (1)
true
boolean
ports.web.redirectTo.port (3)
websecure
string
ports.web.redirectTo.priority (1)
10
number
ports.web.expose (1)
true
boolean
ports.web.exposedPort (1)
80
number
ports.web.port (1)
8000
number
ports.web.protocol (1)
TCP
string
ports.websecure.exposedPort (3)
443
number
ports.websecure.tls.enabled (3)
true
boolean
ports.websecure.tls.options (2)
default
string
ports.websecure.asDefault (1)
true
boolean
ports.websecure.expose (1)
true
boolean
ports.websecure.forwardedHeaders.trustedIPs[] (1)
- "173.245.48.0/20"
- "103.21.244.0/22"
- "103.22.200.0/22"
- "103.31.4.0/22"
- "141.101.64.0/18"
- "108.162.192.0/18"
- "190.93.240.0/20"
- "188.114.96.0/20"
- "197.234.240.0/22"
- "198.41.128.0/17"
- "162.158.0.0/15"
- "104.16.0.0/13"
- "104.24.0.0/14"
- "172.64.0.0/13"
- "131.0.72.0/22"
- "2400:cb00::/32"
- "2606:4700::/32"
- "2803:f800::/32"
- "2405:b500::/32"
- "2405:8100::/32"
- "2a06:98c0::/29"
- "2c0f:f248::/32"
- "10.0.0.0/8"
- "172.16.0.0/12"
- "192.168.0.0/16"
string
ports.websecure.http3.enabled (1)
true
boolean
ports.websecure.port (1)
8443
number
ports.websecure.protocol (1)
TCP
string
ports.websecure.proxyProtocol.trustedIPs[] (1)
- "173.245.48.0/20"
- "103.21.244.0/22"
- "103.22.200.0/22"
- "103.31.4.0/22"
- "141.101.64.0/18"
- "108.162.192.0/18"
- "190.93.240.0/20"
- "188.114.96.0/20"
- "197.234.240.0/22"
- "198.41.128.0/17"
- "162.158.0.0/15"
- "104.16.0.0/13"
- "104.24.0.0/14"
- "172.64.0.0/13"
- "131.0.72.0/22"
- "2400:cb00::/32"
- "2606:4700::/32"
- "2803:f800::/32"
- "2405:b500::/32"
- "2405:8100::/32"
- "2a06:98c0::/29"
- "2c0f:f248::/32"
- "10.0.0.0/8"
- "172.16.0.0/12"
- "192.168.0.0/16"
string
ports.metrics.expose.default (2)
true
boolean
ports.metrics.exposedPort (2)
8082
number
ports.metrics.port (2)
8082
number
ports.traefik.port (2)
9000
number
ports.traefik.expose.default (1)
false
boolean
ports.traefik.expose (1)
false
boolean
ports.traefik.exposedPort (1)
8080
number
ports.traefik.protocol (1)
TCP
string
ports.http.expose.default (1)
true
boolean
ports.http.exposedPort (1)
80
number
ports.http.port (1)
9080
number
ports.http.redirectTo.port (1)
https
string
ports.https.expose.default (1)
true
boolean
ports.https.exposedPort (1)
443
number
ports.https.port (1)
9443
number
rbac.enabled (3)
true
boolean
env[].name (2)
TZ
string
env[].value (2)
America/Chicago
string
experimental.kubernetesGateway.enabled (2)
true
boolean
gatewayClass.enabled (2)
true
boolean
gatewayClass.name (2)
traefik
string
image.repository (2)
docker/library/traefik
string
image.tag (2)
2.11.0
string
image.registry (1)
public.ecr.aws
string
ingressClass.isDefaultClass (2)
false
boolean
ingressClass.enabled (1)
true
boolean
ingressClass.fallbackApiVersion (1)
v1
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].key (1)
app.kubernetes.io/name
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].operator (1)
In
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].values[] (1)
- traefik
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1)
kubernetes.io/hostname
string
dnsPolicy (1)
ClusterFirst
string
instanceLabelOverride (1)
traefik
string
pilot.enabled (1)
false
boolean
tolerations[].effect (1)
NoSchedule
NoSchedule
string
tolerations[].key (1)
node-role.kubernetes.io/control-plane
k8s.pascaliske.dev/location
string
tolerations[].operator (1)
Exists
Equal
string
tolerations[].value (1)
public
string