traefik helm

Traefik is a HTTP reverse proxy and load balancer for microservices. It integrates with popular orchestration systems, such as Kubernetes, to provide seamless and automatic service discovery, load balancing, and proxying for your applications. Traefik is designed to be fast, efficient, and easy to use, making it a good solution for home lab environments. With Traefik, you can expose your applications to the internet with ease, providing remote access to your services from anywhere. Whether you're looking to host a personal website, run a web-based service, or simply provide external access to your applications.

More popular helm chart found

traefik from helm.traefik is more popular with 14 repositories.

Install

Install with:

helm repo add traefik https://traefik.github.io/charts/
helm install traefik traefik/traefik -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 13)

NameRepoStarsVersionTimestamp
traefikh3mmy/bloopySphere6340.3.07 days ago
traefikqjoly/GitOps10941.1.121 days ago
traefikqjoly/GitOps10941.1.121 days ago

Values

See the most popular values for this chart:

KeyTypes
additionalArguments[] (7)
- --serverstransport.insecureskipverify
string
providers.kubernetesCRD.allowCrossNamespace (7)
true
boolean
providers.kubernetesCRD.enabled (7)
true
boolean
providers.kubernetesCRD.allowExternalNameServices (5)
true
boolean
providers.kubernetesCRD.allowEmptyServices (1)
false
boolean
providers.kubernetesCRD.ingressClass (1)
traefik-external
string
providers.kubernetesIngress.enabled (7)
true
boolean
providers.kubernetesIngress.allowExternalNameServices (4)
true
boolean
providers.kubernetesIngress.publishedService.enabled (4)
true
boolean
providers.kubernetesIngress.allowEmptyServices (2)
true
boolean
providers.kubernetesIngress.ingressClass (1)
traefik
string
providers.kubernetesGateway.enabled (4)
true
boolean
providers.kubernetesGateway.experimentalChannel (2)
true
boolean
service.enabled (7)
true
boolean
service.spec.externalTrafficPolicy (6)
Local
string
service.spec.ipFamilies[] (2)
- IPv4
- IPv6
string
service.spec.loadBalancerIP (2)
${TRAEFIK_EXTERNAL_IP}
string
service.spec.type (2)
LoadBalancer
string
service.spec.ipFamilyPolicy (1)
PreferDualStack
string
service.spec.loadBalancerIPs[] (1)
- ${LB_V4_TRAEFIK}
- ${LB_V6_TRAEFIK}
string
service.type (6)
LoadBalancer
string
service.annotations."metallb.io/loadBalancerIPs" (2)
${LB_V4_TRAEFIK}, ${LB_V6_TRAEFIK}
string
service.annotations."metallb.universe.tf/loadBalancerIPs" (2)
${metallb_ip_traefik}
string
service.annotations."external-dns.alpha.kubernetes.io/hostname" (1)
internal.${SECRET_DOMAIN}
string
service.annotations."lbipam.cilium.io/sharing-cross-namespace" (1)
*
string
service.annotations."lbipam.cilium.io/sharing-key" (1)
public
string
service.annotations."metallb.io/allow-shared-ip" (1)
traefik
string
ingressClass.enabled (6)
true
boolean
ingressClass.isDefaultClass (6)
true
boolean
ingressClass.fallbackApiVersion (1)
v1
string
ingressClass.name (1)
traefik
string
deployment.replicas (5)
2
number
deployment.enabled (3)
true
boolean
deployment.kind (3)
Deployment
string
deployment.additionalVolumes[].name (1)
crowdsec-bouncer-key
string
deployment.additionalVolumes[].secret.optional (1)
true
boolean
deployment.additionalVolumes[].secret.secretName (1)
crowdsec-bouncer
string
deployment.podAnnotations."prometheus.io/path" (1)
/metrics
string
deployment.podAnnotations."prometheus.io/port" (1)
9100
string
deployment.podAnnotations."prometheus.io/scrape" (1)
true
string
ingressRoute.dashboard.enabled (5)
false
boolean
metrics.prometheus.serviceMonitor.enabled (5)
true
boolean
metrics.prometheus.serviceMonitor.honorLabels (2)
true
boolean
metrics.prometheus.serviceMonitor.jobLabel (2)
traefik
string
metrics.prometheus.serviceMonitor.metricRelabelings[].action (2)
drop
string
metrics.prometheus.serviceMonitor.metricRelabelings[].regex (2)
^fluentd_output_status_buffer_(oldest|newest)_.+
string
metrics.prometheus.serviceMonitor.metricRelabelings[].replacement (2)
$1
string
metrics.prometheus.serviceMonitor.metricRelabelings[].separator (2)
;
string
metrics.prometheus.serviceMonitor.metricRelabelings[].sourceLabels[] (2)
- __name__
string
metrics.prometheus.serviceMonitor.relabelings[].action (2)
replace
string
metrics.prometheus.serviceMonitor.relabelings[].regex (2)
^(.*)$
string
metrics.prometheus.serviceMonitor.relabelings[].replacement (2)
$1
string
metrics.prometheus.serviceMonitor.relabelings[].separator (2)
;
string
metrics.prometheus.serviceMonitor.relabelings[].sourceLabels[] (2)
- __meta_kubernetes_pod_node_name
string
metrics.prometheus.serviceMonitor.relabelings[].targetLabel (2)
nodename
string
metrics.prometheus.serviceMonitor.additionalLabels.foo (1)
bar
string
metrics.prometheus.serviceMonitor.interval (1)
30s
string
metrics.prometheus.serviceMonitor.namespace (1)
networking
string
metrics.prometheus.serviceMonitor.namespaceSelector.matchNames[] (1)
- traefik
string
metrics.prometheus.serviceMonitor.scrapeInterval (1)
30s
string
metrics.prometheus.serviceMonitor.scrapeTimeout (1)
5s
string
metrics.prometheus.entryPoint (3)
metrics
string
metrics.prometheus.service.enabled (3)
true
boolean
metrics.prometheus.service.annotations."prometheus.io/path" (1)
/metrics
string
metrics.prometheus.service.annotations."prometheus.io/port" (1)
9100
string
metrics.prometheus.service.annotations."prometheus.io/scrape" (1)
true
string
metrics.prometheus.prometheusRule.enabled (2)
true
boolean
metrics.prometheus.prometheusRule.rules[].alert (2)
TraefikDown
string
metrics.prometheus.prometheusRule.rules[].annotations.description (2)
{{ $labels.pod }} on {{ $labels.nodename }} is down
string
metrics.prometheus.prometheusRule.rules[].annotations.summary (2)
Traefik Down
string
metrics.prometheus.prometheusRule.rules[].expr (2)
up{job="traefik"} == 0
string
metrics.prometheus.prometheusRule.rules[].for (2)
5m
string
metrics.prometheus.prometheusRule.rules[].labels.context (2)
traefik
string
metrics.prometheus.prometheusRule.rules[].labels.severity (2)
warning
string
metrics.prometheus.prometheusRule.namespace (1)
networking
string
metrics.prometheus.addEntryPointsLabels (1)
true
boolean
metrics.prometheus.addRoutersLabels (1)
true
boolean
metrics.prometheus.addServicesLabels (1)
true
boolean
metrics.prometheus.disableAPICheck (1)
false
boolean
metrics.prometheus.enabled (1)
true
boolean
metrics.otlp.addEntryPointsLabels (2)
true
boolean
metrics.otlp.addRoutersLabels (2)
true
boolean
metrics.otlp.addServicesLabels (2)
true
boolean
metrics.otlp.enabled (2)
true
boolean
metrics.otlp.http.enabled (2)
true
boolean
metrics.otlp.http.endpoint (2)
https://signoz-ingest.mocha.thoughtless.eu/v1/metrics
string
metrics.otlp.http.tls.cert (1)
/mtls/tls.crt
string
metrics.otlp.http.tls.key (1)
/mtls/tls.key
string
metrics.otlp.resourceAttributes."k8s.cluster.name" (2)
turing
string
logs.general.level (4)
WARN
string
logs.general.format (2)
json
string
logs.access.enabled (3)
true
boolean
logs.access.fields.headers.defaultmode (2)
keep
string
logs.access.fields.headers.names.Authorization (1)
drop
string
logs.access.fields.general.names.ClientAddr (1)
keep
string
logs.access.fields.general.names.defaultmode (1)
drop
string
logs.access.fields.general.names.Duration (1)
keep
string
logs.access.fields.general.names.RequestAddr (1)
keep
string
logs.access.fields.general.names.RequestCount (1)
keep
string
logs.access.fields.general.names.RequestMethod (1)
keep
string
logs.access.fields.general.names.RequestPath (1)
keep
string
logs.access.fields.general.names.RequestProtocol (1)
keep
string
logs.access.fields.general.names.RequestScheme (1)
keep
string
logs.access.fields.general.names.RetryAttempts (1)
keep
string
logs.access.fields.general.names.RouterName (1)
keep
string
logs.access.format (2)
json
string
logs.access.filters.minduration (1)
450000ns
string
logs.access.filters.retryattempts (1)
true
boolean
logs.access.filters.statuscodes (1)
200,300-302
string
ports.web.port (4)
8000
number
ports.web.exposedPort (3)
80
number
ports.web.protocol (3)
TCP
string
ports.web.expose.default (2)
true
boolean
ports.web.expose (1)
true
boolean
ports.web.http.redirections.entryPoint.scheme (2)
https
string
ports.web.http.redirections.entryPoint.to (2)
websecure
string
ports.web.http.redirections.entryPoint.permanent (1)
true
boolean
ports.web.http.redirections.entryPoint.priority (1)
10
number
ports.web.redirections.entrypoint.permanent (1)
true
boolean
ports.web.redirections.entryPoint.permanent (1)
true
boolean
ports.web.redirections.entrypoint.scheme (1)
https
string
ports.web.redirections.entryPoint.scheme (1)
https
string
ports.web.redirections.entrypoint.to (1)
websecure
string
ports.web.redirections.entryPoint.to (1)
websecure
string
ports.websecure.exposedPort (4)
443
number
ports.websecure.forwardedHeaders.trustedIPs[] (4)
- ${CALICO_NODE_CIDR}
- ${CALICO_NODE_CIDR_IPV6}
- ${LOCAL_CIDR_1}
- ${LOCAL_CIDR_2}
- ${LOCAL_GATEWAY_MAIN}
- ${LOCAL_GATEWAY_BGP}
- ${LOCAL_GATEWAY_CORE_BLOOP}
- ${NETWORK_K8S_CLUSTER_CIDR}
- ${NETWORK_K8S_CLUSTER_CIDR_V6}
- ${NETWORK_K8S_SERVICE_CIDR}
- ${NETWORK_K8S_SERVICE_CIDR_V6}
- ${NETWORK_BGP_BLOCK_V4}
- ${NETWORK_BGP_BLOCK_V6}
- "103.21.244.0/22"
- "103.22.200.0/22"
- "103.31.4.0/22"
- "104.16.0.0/13"
- "104.24.0.0/14"
- "108.162.192.0/18"
- "131.0.72.0/22"
- "141.101.64.0/18"
- "162.158.0.0/15"
- "172.64.0.0/13"
- "173.245.48.0/20"
- "188.114.96.0/20"
- "190.93.240.0/20"
- "197.234.240.0/22"
- "198.41.128.0/17"
- "2400:cb00::/32"
- "2606:4700::/32"
- "2803:f800::/32"
- "2405:b500::/32"
- "2405:8100::/32"
- "2a06:98c0::/29"
- "2c0f:f248::/32"
string
ports.websecure.port (4)
8443
number
ports.websecure.http3.enabled (3)
true
boolean
ports.websecure.protocol (3)
TCP
string
ports.websecure.expose.default (2)
true
boolean
ports.websecure.expose.internal (1)
true
boolean
ports.websecure.expose (1)
true
boolean
ports.websecure.http.tls.enabled (2)
true
boolean
ports.websecure.http.tls.options (2)
default
string
ports.websecure.http.tls.domains[].bloop (1)
${SECRET_DOMAIN}
string
ports.websecure.http.tls.domains[].lilj (1)
${LILJ_DOMAIN}
string
ports.websecure.http.tls.domains[].main (1)
${XYZ_DOMAIN}
string
ports.websecure.http.tls.domains[].sans[] (1)
- *.${XYZ_DOMAIN}
- *.${SECRET_DOMAIN}
- *.${TGR_DOMAIN}
- *.${LILJ_DOMAIN}
string
ports.websecure.http.tls.domains[].tyg3r (1)
${TGR_DOMAIN}
string
ports.websecure.http.tls.stores (1)
networking-default@kubernetescrd
string
ports.websecure.proxyProtocol.trustedIPs[] (2)
- "10.42.0.0/16"
- "10.43.0.0/16"
- "10.168.2.0/24"
string
ports.websecure.respondingTimeouts.idleTimeout (1)
600s
string
ports.websecure.respondingTimeouts.readTimeout (1)
600s
string
ports.websecure.respondingTimeouts.writeTimeout (1)
600s
string
ports.websecure.tls.enabled (1)
true
boolean
ports.websecure.transport.keepAliveMaxRequests (1)
100
number
ports.websecure.transport.keepAliveMaxTime (1)
300
number
ports.websecure.transport.lifeCycle.graceTimeOut (1)
300
number
ports.websecure.transport.lifeCycle.requestAcceptGraceTimeout (1)
300
number
ports.websecure.transport.respondingTimeouts.idleTimeout (1)
300
number
ports.websecure.transport.respondingTimeouts.readTimeout (1)
300
number
ports.websecure.transport.respondingTimeouts.writeTimeout (1)
300
number
ports.metrics.expose.default (3)
true
boolean
ports.metrics.exposedPort (3)
8082
number
ports.metrics.port (3)
8082
number
ports.mqtts.expose.default (2)
true
boolean
ports.mqtts.exposedPort (2)
8883
number
ports.mqtts.port (2)
8183
number
ports.mqtts.http.tls.enabled (1)
true
boolean
ports.mqtts.http.tls.options (1)
default
string
ports.mqtts.protocol (1)
TCP
string
ports.traefik.expose.default (2)
true
boolean
ports.traefik.expose (1)
false
boolean
ports.traefik.port (2)
8080
number
ports.traefik.protocol (2)
TCP
string
ports.traefik.exposedPort (1)
8080
number
ports.coap.expose.default (1)
true
boolean
ports.coap.exposedPort (1)
5683
number
ports.coap.port (1)
5683
number
ports.coap.protocol (1)
UDP
string
ports.dns-tls.expose.default (1)
true
boolean
ports.dns-tls.exposedPort (1)
853
number
ports.dns-tls.http.tls.enabled (1)
true
boolean
ports.dns-tls.http.tls.options (1)
default
string
ports.dns-tls.port (1)
8853
number
ports.ldaps.expose.default (1)
true
boolean
ports.ldaps.exposedPort (1)
636
number
ports.ldaps.http.tls.enabled (1)
true
boolean
ports.ldaps.http.tls.options (1)
default
string
ports.ldaps.port (1)
8636
number
ports.mqtt.expose.default (1)
true
boolean
ports.mqtt.exposedPort (1)
1883
number
ports.mqtt.port (1)
1883
number
ports.mqtt.protocol (1)
TCP
string
ports.postgres.expose.default (1)
true
boolean
ports.postgres.exposedPort (1)
5432
number
ports.postgres.http.tls.enabled (1)
false
boolean
ports.postgres.port (1)
5432
number
ports.wss.expose.default (1)
true
boolean
ports.wss.exposedPort (1)
8084
number
ports.wss.http.tls.enabled (1)
true
boolean
ports.wss.http.tls.options (1)
default
string
ports.wss.port (1)
8284
number
extraObjects[].apiVersion (3)
traefik.io/v1alpha1
string
extraObjects[].kind (3)
TLSStore
string
extraObjects[].metadata.name (3)
default
string
extraObjects[].metadata.namespace (2)
kube-system
string
extraObjects[].spec.certificates[].secretName (2)
letsencrypt-cert-secret
string
extraObjects[].spec.ports[].name (1)
traefik
string
extraObjects[].spec.ports[].port (1)
8080
number
extraObjects[].spec.ports[].protocol (1)
TCP
string
extraObjects[].spec.ports[].targetPort (1)
8080
number
extraObjects[].spec.selector."app.kubernetes.io/instance" (1)
traefik-default
string
extraObjects[].spec.selector."app.kubernetes.io/name" (1)
traefik
string
extraObjects[].spec.type (1)
ClusterIP
string
gateway.listeners.web.namespacePolicy.from (3)
All
string
gateway.listeners.web.port (3)
8000
number
gateway.listeners.web.protocol (3)
HTTP
string
gateway.listeners.websecure.certificateRefs[].name (3)
tls.${XYZ_DOMAIN/./-}
string
gateway.listeners.websecure.certificateRefs[].kind (2)
Secret
string
gateway.listeners.websecure.certificateRefs[].namespace (1)
traefik
string
gateway.listeners.websecure.namespacePolicy.from (3)
All
string
gateway.listeners.websecure.port (3)
8443
number
gateway.listeners.websecure.protocol (3)
HTTPS
string
gateway.listeners.websecure.mode (1)
Terminate
string
gateway.name (2)
traefik
string
gateway.annotations."external-dns.alpha.kubernetes.io/target" (1)
tun-${CLUSTER_NAME}.${DOMAIN}
string
gateway.annotations."metallb.universe.tf/loadBalancerIPs" (1)
192.168.0.200
string
gateway.enabled (1)
true
boolean
gateway.infrastructure.annotations."external-dns.alpha.kubernetes.io/hostname" (1)
tun-${CLUSTER_NAME}.${DOMAIN}
string
accessLog.enabled (2)
true
boolean
accessLog.format (1)
json
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].key (2)
app.kubernetes.io/name
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].operator (2)
In
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].values[] (2)
- traefik
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (2)
kubernetes.io/hostname
string
env[].name (2)
TZ
string
env[].value (2)
${TIMEZONE}
string
globalArguments[] (2)
- --global.sendanonymoususage=false
- --global.checknewversion=false
string
image.repository (2)
traefik
string
image.registry (1)
public.ecr.aws
string
image.tag (1)
2.11.0
string
rbac.enabled (2)
true
boolean
resources.limits.memory (2)
742M
string
resources.requests.cpu (2)
15m
string
resources.requests.memory (2)
110M
string
tlsOptions.default.maxVersion (2)
VersionTLS13
string
tlsOptions.default.minVersion (2)
VersionTLS12
string
tlsOptions.default.sniStrict (2)
true
boolean
tlsOptions.plex.maxVersion (1)
VersionTLS13
string
tlsOptions.plex.minVersion (1)
VersionTLS12
string
tlsStore.default.defaultCertificate.secretName (2)
external-default-tls
string
additionalVolumeMounts[].mountPath (1)
/etc/traefik/crowdsec
string
additionalVolumeMounts[].name (1)
crowdsec-bouncer-key
string
additionalVolumeMounts[].readOnly (1)
true
boolean
api.disableDashboardAd (1)
true
boolean
dnsPolicy (1)
ClusterFirst
string
experimental.abortOnPluginFailure (1)
true
boolean
experimental.plugins.bouncer.moduleName (1)
github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin
string
experimental.plugins.bouncer.version (1)
v1.6.0
string
experimental.plugins.traefik-oidc-auth.moduleName (1)
github.com/sevensolutions/traefik-oidc-auth
string
experimental.plugins.traefik-oidc-auth.version (1)
v0.18.0
string
experimental.plugins.traefik-plugin-blockuseragent.moduleName (1)
github.com/agence-gaya/traefik-plugin-blockuseragent
string
experimental.plugins.traefik-plugin-blockuseragent.version (1)
v0.1.7
string
log.level (1)
INFO
string
persistence.enabled (1)
true
boolean
persistence.storageClass (1)
local-path
string
pilot.enabled (1)
false
boolean
tracing.addInternals (1)
true
boolean
volumes[].mountPath (1)
/mtls
string
volumes[].name (1)
signoz-mtls-client
string
volumes[].type (1)
secret
string