traefik helm

Traefik is a HTTP reverse proxy and load balancer for microservices. It integrates with popular orchestration systems, such as Kubernetes, to provide seamless and automatic service discovery, load balancing, and proxying for your applications. Traefik is designed to be fast, efficient, and easy to use, making it a good solution for home lab environments. With Traefik, you can expose your applications to the internet with ease, providing remote access to your services from anywhere. Whether you're looking to host a personal website, run a web-based service, or simply provide external access to your applications.

Install

Install with:

helm repo add traefik-charts https://helm.traefik.io/traefik/
helm install traefik traefik-charts/traefik -f values.yaml

Top Repositories (2 out of 24)

See examples from other people.

NameRepoStarsVersionTimestamp
traefikxUnholy/k8s-gitops38124.0.010 days ago
traefikdfroberg/cluster4214.0.1a year ago

Values

See the most popular values for this chart:

KeyTypes
ingressRoute.dashboard.enabled (22)
false
boolean
experimental.plugins.enabled (21)
false
boolean
experimental.kubernetesGateway.enabled (2)
true
boolean
experimental.kubernetesGateway.gateway.enabled (1)
false
boolean
experimental.http3.enabled (1)
false
boolean
ingressClass.enabled (21)
true
boolean
ingressClass.isDefaultClass (21)
true
boolean
ingressClass.fallbackApiVersion (18)
v1
string
logs.access.enabled (21)
true
boolean
logs.access.format (18)
json
string
logs.access.fields.headers.defaultmode (3)
keep
string
logs.access.fields.headers.names.Authorization (2)
drop
string
logs.access.fields.headers.defaultMode (1)
keep
string
logs.access.fields.general.names.ClientAddr (2)
keep
string
logs.access.fields.general.names.defaultmode (2)
drop
string
logs.access.fields.general.names.Duration (2)
keep
string
logs.access.fields.general.names.RequestAddr (2)
keep
string
logs.access.fields.general.names.RequestCount (2)
keep
string
logs.access.fields.general.names.RequestMethod (2)
keep
string
logs.access.fields.general.names.RequestPath (2)
keep
string
logs.access.fields.general.names.RequestProtocol (2)
keep
string
logs.access.fields.general.names.RequestScheme (2)
keep
string
logs.access.fields.general.names.RetryAttempts (2)
keep
string
logs.access.fields.general.names.RouterName (2)
keep
string
logs.access.fields.general.defaultmode (1)
keep
string
logs.access.fields.defaultMode (1)
keep
string
logs.access.fields.names.ClientUsername (1)
keep
string
logs.access.filters.minduration (1)
450000ns
string
logs.access.filters.retryattempts (1)
true
boolean
logs.access.filters.statuscodes (1)
200,300-302
string
logs.general.level (20)
DEBUG
string
logs.general.format (18)
json
string
additionalArguments[] (20)
- --providers.kubernetesingress.ingressendpoint.ip=${METALLB_TRAEFIK_ADDR}
- --providers.kubernetesingress.allowexternalnameservices=true
- --providers.kubernetescrd.allowexternalnameservices=true
string
deployment.replicas (20)
1
number
deployment.kind (17)
Deployment
string
deployment.enabled (6)
true
boolean
deployment.initContainers[].command[] (1)
- sh
- -c
- chmod -Rv 600 /data/*
string
deployment.initContainers[].image (1)
busybox:1.35.0
string
deployment.initContainers[].name (1)
volume-permissions
string
deployment.initContainers[].volumeMounts[].mountPath (1)
/data
string
deployment.initContainers[].volumeMounts[].name (1)
data
string
deployment.minReadySeconds (1)
0
number
deployment.shareProcessNamespace (1)
false
boolean
deployment.terminationGracePeriodSeconds (1)
60
number
globalArguments[] (20)
- --api.insecure=true
- --serverstransport.insecureskipverify=true
- --providers.kubernetesingress.ingressclass=traefik
- --metrics.prometheus=true
- --metrics.prometheus.entryPoint=metrics
string
ports.websecure.tls.enabled (20)
true
boolean
ports.websecure.tls.options (20)
default
string
ports.websecure.tls.certResolver (2)

string
ports.websecure.tls.domains[].main (2)
${XYZ_DOMAIN}
string
ports.websecure.tls.domains[].sans[] (2)
- *.${XYZ_DOMAIN}
- *.${SECRET_DOMAIN}
- *.${TGR_DOMAIN}
string
ports.websecure.tls.domains[].bloop (1)
${SECRET_DOMAIN}
string
ports.websecure.tls.domains[].tyg3r (1)
${TGR_DOMAIN}
string
ports.websecure.tls.stores (2)
networking-default@kubernetescrd
string
ports.websecure.exposedPort (6)
443
number
ports.websecure.expose (4)
true
boolean
ports.websecure.port (4)
8443
number
ports.websecure.protocol (4)
TCP
string
ports.websecure.forwardedHeaders.trustedIPs[] (2)
- "10.0.0.0/8"
- "192.168.0.0/16"
- "173.245.48.0/20"
- "103.21.244.0/22"
- "103.22.200.0/22"
- "103.31.4.0/22"
- "141.101.64.0/18"
- "108.162.192.0/18"
- "190.93.240.0/20"
- "188.114.96.0/20"
- "197.234.240.0/22"
- "198.41.128.0/17"
- "162.158.0.0/15"
- "104.16.0.0/13"
- "104.24.0.0/14"
- "172.64.0.0/13"
- "131.0.72.0/22"
- "2400:cb00::/32"
- "2606:4700::/32"
- "2803:f800::/32"
- "2405:b500::/32"
- "2405:8100::/32"
- "2a06:98c0::/29"
- "2c0f:f248::/32"
string
ports.websecure.http3.enabled (2)
true
boolean
ports.websecure.insecure (1)
false
boolean
ports.websecure.trustedIPs[] (1)
- ${CALICO_NODE_CIDR}
- ${CALICO_NODE_CIDR_IPV6}
- ${LOCAL_CIDR_1}
- ${LOCAL_CIDR_2}
- ${LOCAL_GATEWAY_MAIN}
- ${LOCAL_GATEWAY_BGP}
- ${LOCAL_GATEWAY_CORE_BLOOP}
- ${NETWORK_K8S_CLUSTER_CIDR}
- ${NETWORK_K8S_CLUSTER_CIDR_V6}
- ${NETWORK_K8S_SERVICE_CIDR}
- ${NETWORK_K8S_SERVICE_CIDR_V6}
- ${NETWORK_BGP_BLOCK_V4}
- ${NETWORK_BGP_BLOCK_V6}
- "172.16.0.0/12"
- "103.21.244.0/22"
- "103.22.200.0/22"
- "103.31.4.0/22"
- "104.16.0.0/13"
- "104.24.0.0/14"
- "108.162.192.0/18"
- "131.0.72.0/22"
- "141.101.64.0/18"
- "162.158.0.0/15"
- "172.64.0.0/13"
- "173.245.48.0/20"
- "188.114.96.0/20"
- "190.93.240.0/20"
- "197.234.240.0/22"
- "198.41.128.0/17"
- "2400:cb00::/32"
- "2606:4700::/32"
- "2803:f800::/32"
- "2405:b500::/32"
- "2405:8100::/32"
- "2a06:98c0::/29"
- "2c0f:f248::/32"
string
ports.traefik.expose (19)
true
boolean
ports.traefik.exposedPort (3)
9000
number
ports.traefik.port (3)
9000
number
ports.traefik.protocol (3)
TCP
string
ports.web.redirectTo (19)
websecure
string
ports.web.expose (4)
true
boolean
ports.web.exposedPort (4)
80
number
ports.web.port (4)
8000
number
ports.web.protocol (4)
TCP
string
ports.metrics.expose (17)
true
boolean
ports.metrics.port (17)
8082
number
ports.metrics.exposedPort (15)
8082
number
ports.metrics.protocol (1)
TCP
string
ports.dns-tls.expose (1)
true
boolean
ports.dns-tls.exposedPort (1)
853
number
ports.dns-tls.port (1)
8853
number
ports.dns-tls.tls.enabled (1)
true
boolean
ports.dns-tls.tls.options (1)
default
string
ports.factorio-ab.expose (1)
true
boolean
ports.factorio-ab.exposedPort (1)
34198
number
ports.factorio-ab.port (1)
34198
number
ports.factorio-ab.protocol (1)
UDP
string
ports.factorio-v.expose (1)
true
boolean
ports.factorio-v.exposedPort (1)
34197
number
ports.factorio-v.port (1)
34197
number
ports.factorio-v.protocol (1)
UDP
string
ports.ldaps.expose (1)
true
boolean
ports.ldaps.exposedPort (1)
636
number
ports.ldaps.port (1)
8636
number
ports.ldaps.tls.enabled (1)
true
boolean
ports.ldaps.tls.options (1)
default
string
ports.minecraft.expose (1)
true
boolean
ports.minecraft.exposedPort (1)
19132
number
ports.minecraft.port (1)
19132
number
ports.minecraft.protocol (1)
UDP
string
ports.mqtts.expose (1)
true
boolean
ports.mqtts.exposedPort (1)
8883
number
ports.mqtts.port (1)
8183
number
ports.mqtts.tls.enabled (1)
true
boolean
ports.mqtts.tls.options (1)
default
string
ports.postgres.expose (1)
true
boolean
ports.postgres.expostedPort (1)
5432
number
ports.postgres.port (1)
5432
number
ports.postgres.tls.enabled (1)
false
boolean
ports.ssh.expose (1)
true
boolean
ports.ssh.exposedPort (1)
22
number
ports.ssh.port (1)
7999
number
ports.ssh.protocol (1)
TCP
string
ports.unificaptive.expose (1)
true
boolean
ports.unificaptive.exposedPort (1)
8880
number
ports.unificaptive.port (1)
8881
number
ports.unificaptive.protocol (1)
TCP
string
ports.unificaptives.expose (1)
true
boolean
ports.unificaptives.exposedPort (1)
8843
number
ports.unificaptives.port (1)
8844
number
ports.unificaptives.protocol (1)
TCP
string
ports.unificaptives.tls.enabled (1)
false
boolean
ports.wss.expose (1)
true
boolean
ports.wss.exposedPort (1)
8084
number
ports.wss.port (1)
8284
number
ports.wss.tls.enabled (1)
true
boolean
ports.wss.tls.options (1)
default
string
service.enabled (20)
true
boolean
service.type (20)
LoadBalancer
string
service.spec.externalTrafficPolicy (18)
Local
string
service.spec.loadBalancerIP (12)
${METALLB_TRAEFIK_ADDR}
string
service.spec.externalIPs[] (2)
- ${CLUSTER_LB_TRAEFIK}
string
service.annotations."metallb.universe.tf/allow-shared-ip" (7)
traefik
string
service.annotations."metallb.universe.tf/loadBalancerIPs" (6)
192.168.0.230
string
service.annotations."external-dns.alpha.kubernetes.io/hostname" (2)
ipv4.${SECRET_DOMAIN}
string
service.annotations."io.cilium/lb-ipam-ips" (2)
${LB_TRAEFIK}
string
service.annotations."metallb.universe.tf/loadBalancerIP" (1)
${LB_TRAEFIK_ADDRESS}
string
service.externalTrafficPolicy (2)
Local
string
service.ipFamilies[] (2)
- IPv4
string
service.ipFamilyPolicy (2)
RequireDualStack
string
service.loadBalancerIPs[] (2)
- ${TRAEFIK_IP}
string
service.single (1)
false
boolean
tlsOptions.default.minVersion (20)
VersionTLS12
string
tlsOptions.default.maxVersion (19)
VersionTLS13
string
tlsOptions.default.sniStrict (19)
true
boolean
tlsOptions.default.cipherSuites[] (2)
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
string
tlsOptions.default.curvePreferences[] (1)
- secp521r1
- secp384r1
string
tlsOptions.plex.maxVersion (1)
VersionTLS13
string
tlsOptions.plex.minVersion (1)
VersionTLS12
string
pilot.enabled (17)
false
boolean
pilot.token (1)

string
resources.limits.memory (17)
500Mi
string
resources.requests.cpu (17)
500m
string
resources.requests.memory (17)
100Mi
string
image.name (10)
traefik
string
image.tag (5)
2.10.3
string
image.repository (3)
traefik
string
image.pullPolicy (2)
IfNotPresent
string
image.registry (1)
public.ecr.aws
string
providers.kubernetesCRD.allowCrossNamespace (8)
true
boolean
providers.kubernetesCRD.enabled (8)
true
boolean
providers.kubernetesCRD.allowExternalNameServices (7)
true
boolean
providers.kubernetesCRD.allowEmptyServices (3)
false
boolean
providers.kubernetesIngress.allowExternalNameServices (5)
true
boolean
providers.kubernetesIngress.enabled (5)
true
boolean
providers.kubernetesIngress.ingressClass (4)
traefik
string
providers.kubernetesIngress.allowEmptyServices (3)
false
boolean
providers.kubernetesIngress.publishedService.enabled (3)
true
boolean
providers.kubernetesIngress.allowCrossNamespace (2)
true
boolean
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].key (5)
app.kubernetes.io/name
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].operator (5)
In
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchExpressions[].values[] (5)
- traefik
string
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (5)
kubernetes.io/hostname
string
affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchExpressions[].key (1)
app.kubernetes.io/name
string
affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchExpressions[].operator (1)
In
string
affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchExpressions[].values[] (1)
- traefik
string
affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)
kubernetes.io/hostname
string
affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
100
number
affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].key (1)
worker
string
affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].operator (1)
In
string
affinity.nodeAffinity.requiredDuringSchedulingIgnoredDuringExecution.nodeSelectorTerms[].matchExpressions[].values[] (1)
- yes
string
podSecurityPolicy.enabled (4)
false
boolean
rbac.enabled (3)
true
boolean
rbac.namespaced (1)
false
boolean
tolerations[].key (3)
node-role.kubernetes.io/master
string
tolerations[].operator (3)
Exists
string
tolerations[].effect (1)
NoExecute
NoExecute
string
tolerations[].tolerationSeconds (1)
300
300
number
autoscaling.enabled (2)
false
boolean
autoscaling.maxReplicas (1)
3
number
autoscaling.minReplicas (1)
1
number
env[].name (2)
TZ
string
env[].value (2)
${TIMEZONE}
string
env[].valueFrom.secretKeyRef.key (1)
CLOUDFLARE_API_KEY
string
env[].valueFrom.secretKeyRef.name (1)
home-secrets
string
metrics.prometheus.entryPoint (2)
metrics
string
metrics.prometheus.prometheusRule.namespace (1)
networking
string
metrics.prometheus.prometheusRule.rules[].alert (1)
TraefikDown
string
metrics.prometheus.prometheusRule.rules[].annotations.description (1)
{{ $labels.pod }} on {{ $labels.nodename }} is down
string
metrics.prometheus.prometheusRule.rules[].annotations.summary (1)
Traefik Down
string
metrics.prometheus.prometheusRule.rules[].expr (1)
up{job="traefik"} == 0
string
metrics.prometheus.prometheusRule.rules[].for (1)
5m
string
metrics.prometheus.prometheusRule.rules[].labels.context (1)
traefik
string
metrics.prometheus.prometheusRule.rules[].labels.severity (1)
warning
string
metrics.prometheus.service.enabled (1)
true
boolean
metrics.prometheus.serviceMonitor.additionalLabels.foo (1)
bar
string
metrics.prometheus.serviceMonitor.honorLabels (1)
true
boolean
metrics.prometheus.serviceMonitor.jobLabel (1)
traefik
string
metrics.prometheus.serviceMonitor.metricRelabelings[].action (1)
drop
string
metrics.prometheus.serviceMonitor.metricRelabelings[].regex (1)
^fluentd_output_status_buffer_(oldest|newest)_.+
string
metrics.prometheus.serviceMonitor.metricRelabelings[].replacement (1)
$1
string
metrics.prometheus.serviceMonitor.metricRelabelings[].separator (1)
;
string
metrics.prometheus.serviceMonitor.metricRelabelings[].sourceLabels[] (1)
- __name__
string
metrics.prometheus.serviceMonitor.namespace (1)
networking
string
metrics.prometheus.serviceMonitor.relabelings[].action (1)
replace
string
metrics.prometheus.serviceMonitor.relabelings[].regex (1)
^(.*)$
string
metrics.prometheus.serviceMonitor.relabelings[].replacement (1)
$1
string
metrics.prometheus.serviceMonitor.relabelings[].separator (1)
;
string
metrics.prometheus.serviceMonitor.relabelings[].sourceLabels[] (1)
- __meta_kubernetes_pod_node_name
string
metrics.prometheus.serviceMonitor.relabelings[].targetLabel (1)
nodename
string
metrics.prometheus.serviceMonitor.scrapeInterval (1)
30s
string
metrics.prometheus.serviceMonitor.scrapeTimeout (1)
5s
string
persistence.enabled (2)
false
boolean
persistence.path (2)
/certs
string
persistence.size (2)
128Mi
string
persistence.accessMode (1)
ReadWriteOnce
string
persistence.name (1)
data
string
persistence.storageClass (1)
filesystem
string
tlsStore.default.defaultCertificate.secretName (2)
${SECRET_PUBLIC_DOMAIN/./-}-tls
string
certResolvers.letsencrypt.dnsChallenge.delayBeforeCheck (1)
30
number
certResolvers.letsencrypt.dnsChallenge.provider (1)
cloudflare
string
certResolvers.letsencrypt.dnsChallenge.resolvers[] (1)
- "1.1.1.1"
- "8.8.8.8"
string
certResolvers.letsencrypt.email (1)
nick@shoresmedia.com
string
certResolvers.letsencrypt.storage (1)
/data/acme.json
string
certResolvers.letsencrypt.tlsChallenge (1)
false
boolean
entryPoints.web.address (1)
:80
string
entryPoints.web.http.redirections.entryPoint.scheme (1)
https
string
entryPoints.web.http.redirections.entryPoint.to (1)
websecure
string
entryPoints.websecure.address (1)
:443
string
hostNetwork (1)
false
boolean
livenessProbe.failureThreshold (1)
3
number
livenessProbe.initialDelaySeconds (1)
10
number
livenessProbe.periodSeconds (1)
10
number
livenessProbe.successThreshold (1)
1
number
livenessProbe.timeoutSeconds (1)
2
number
nodeSelector.worker (1)
yes
string
podDisruptionBudget.enabled (1)
false
boolean
podSecurityContext.fsGroup (1)
65532
number
priorityClassName (1)

string
readinessProbe.failureThreshold (1)
1
number
readinessProbe.initialDelaySeconds (1)
10
number
readinessProbe.periodSeconds (1)
10
number
readinessProbe.successThreshold (1)
1
number
readinessProbe.timeoutSeconds (1)
2
number
rollingUpdate.maxSurge (1)
1
number
rollingUpdate.maxUnavailable (1)
1
number
securityContext.capabilities.drop[] (1)
- ALL
string
securityContext.readOnlyRootFilesystem (1)
true
boolean
securityContext.runAsGroup (1)
65532
number
securityContext.runAsNonRoot (1)
true
boolean
securityContext.runAsUser (1)
65532
number
serviceAccount.name (1)

string
volumes[].mountPath (1)
/data
string
volumes[].name (1)
traefik-config
string
volumes[].type (1)
configMap
string