55 lines
1.6 KiB
YAML
55 lines
1.6 KiB
YAML
##
|
|
# This file contains Values.yaml content that gets added to the output of questions.yaml
|
|
# It's ONLY meant for content that the user is NOT expected to change.
|
|
# Example: Everything under "image" is not included in questions.yaml but is included here.
|
|
##
|
|
|
|
image:
|
|
name: traefik
|
|
# defaults to appVersion
|
|
tag: v2.4
|
|
pullPolicy: IfNotPresent
|
|
|
|
traefik:
|
|
globalArguments:
|
|
- "--global.checknewversion"
|
|
|
|
##
|
|
# Configure Traefik static configuration
|
|
# Additional arguments to be passed at Traefik's binary
|
|
# All available options available on https://docs.traefik.io/reference/static-configuration/cli/
|
|
## Use curly braces to pass values: `helm install --set="additionalArguments={--providers.kubernetesingress.ingressclass=traefik-internal,--log.level=DEBUG}"`
|
|
additionalArguments:
|
|
# - "--providers.kubernetesingress.ingressclass=traefik-internal"
|
|
# - "--log.level=DEBUG"
|
|
# - "--metrics.prometheus"
|
|
- "--entrypoints.websecure.http.tls"
|
|
- "--ping"
|
|
- "--serverstransport.insecureskipverify=true"
|
|
|
|
# TLS Options are created as TLSOption CRDs
|
|
# https://doc.traefik.io/traefik/https/tls/#tls-options
|
|
# Example:
|
|
# tlsOptions:
|
|
# default:
|
|
# sniStrict: true
|
|
# preferServerCipherSuites: true
|
|
# foobar:
|
|
# curvePreferences:
|
|
# - CurveP521
|
|
# - CurveP384
|
|
tlsOptions: {}
|
|
|
|
# Set the container security context
|
|
# To run the container with ports below 1024 this will need to be adjust to run as root
|
|
securityContext:
|
|
capabilities:
|
|
drop: [ALL]
|
|
readOnlyRootFilesystem: true
|
|
runAsGroup: 65532
|
|
runAsNonRoot: true
|
|
runAsUser: 65532
|
|
|
|
podSecurityContext:
|
|
fsGroup: 65532
|