199 lines
7.9 KiB
Smarty
199 lines
7.9 KiB
Smarty
{{/* Define the args */}}
|
|
{{- define "traefik.args" -}}
|
|
args:
|
|
{{/* merge all ports */}}
|
|
{{- $ports := dict }}
|
|
{{- range $.Values.service }}
|
|
{{- range $name, $value := .ports }}
|
|
{{- $_ := set $ports $name $value }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{/* start of actual arguments */}}
|
|
{{- with .Values.globalArguments }}
|
|
{{- range . }}
|
|
- {{ . | quote }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- range $name, $config := $ports }}
|
|
{{- if $config }}
|
|
{{- if or ( eq $config.protocol "http" ) ( eq $config.protocol "https" ) ( eq $config.protocol "tcp" ) }}
|
|
{{- $_ := set $config "protocol" "tcp" }}
|
|
{{- end }}
|
|
- "--entryPoints.{{$name}}.address=:{{ $config.port }}/{{ default "tcp" $config.protocol | lower }}"
|
|
{{- end }}
|
|
{{- end }}
|
|
- "--api.dashboard=true"
|
|
- "--ping=true"
|
|
{{- if .Values.traefikMetrics }}
|
|
{{- if .Values.traefikMetrics.datadog }}
|
|
- "--metrics.datadog=true"
|
|
- "--metrics.datadog.address={{ .Values.traefikMetrics.datadog.address }}"
|
|
{{- end }}
|
|
{{- if .Values.traefikMetrics.influxdb }}
|
|
- "--metrics.influxdb=true"
|
|
- "--metrics.influxdb.address={{ .Values.traefikMetrics.influxdb.address }}"
|
|
- "--metrics.influxdb.protocol={{ .Values.traefikMetrics.influxdb.protocol }}"
|
|
{{- end }}
|
|
{{- if .Values.traefikMetrics.statsd }}
|
|
- "--metrics.statsd=true"
|
|
- "--metrics.statsd.address={{ .Values.traefikMetrics.statsd.address }}"
|
|
{{- if or .Values.traefikMetrics.prometheus }}
|
|
- "--metrics.prometheus=true"
|
|
- "--metrics.prometheus.entrypoint=metrics"
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- if or .Values.metrics.main.enabled }}
|
|
- "--metrics.prometheus=true"
|
|
- "--metrics.prometheus.entrypoint=metrics"
|
|
{{- end }}
|
|
{{- if .Values.providers.kubernetesCRD.enabled }}
|
|
- "--providers.kubernetescrd"
|
|
{{- end }}
|
|
{{- if .Values.providers.kubernetesIngress.enabled }}
|
|
- "--providers.kubernetesingress"
|
|
{{- if .Values.providers.kubernetesIngress.publishedService.enabled }}
|
|
- "--providers.kubernetesingress.ingressendpoint.publishedservice={{ template "providers.kubernetesIngress.publishedServicePath" . }}"
|
|
{{- end }}
|
|
{{- if .Values.providers.kubernetesIngress.labelSelector }}
|
|
- "--providers.kubernetesingress.labelSelector={{ .Values.providers.kubernetesIngress.labelSelector }}"
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- if and .Values.rbac.enabled .Values.rbac.namespaced }}
|
|
{{- if .Values.providers.kubernetesCRD.enabled }}
|
|
- "--providers.kubernetescrd.namespaces={{ template "providers.kubernetesCRD.namespaces" . }}"
|
|
{{- end }}
|
|
{{- if .Values.providers.kubernetesIngress.enabled }}
|
|
- "--providers.kubernetesingress.namespaces={{ template "providers.kubernetesIngress.namespaces" . }}"
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- if $.Values.ingressClass.enabled }}
|
|
- "--providers.kubernetesingress.ingressclass={{ .Release.Name }}"
|
|
{{- end }}
|
|
{{- range $entrypoint, $config := $ports }}
|
|
{{/* add args for proxyProtocol support */}}
|
|
{{- if $config.proxyProtocol }}
|
|
{{- if $config.proxyProtocol.enabled }}
|
|
{{- if $config.proxyProtocol.insecureMode }}
|
|
- "--entrypoints.{{ $entrypoint }}.proxyProtocol.insecure"
|
|
{{- end }}
|
|
{{- if not ( empty $config.proxyProtocol.trustedIPs ) }}
|
|
- "--entrypoints.{{ $entrypoint }}.proxyProtocol.trustedIPs={{ join "," $config.proxyProtocol.trustedIPs }}"
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{/* add args for forwardedHeaders support */}}
|
|
{{- if $config.forwardedHeaders.enabled }}
|
|
{{- if not ( empty $config.forwardedHeaders.trustedIPs ) }}
|
|
- "--entrypoints.{{ $entrypoint }}.forwardedHeaders.trustedIPs={{ join "," $config.forwardedHeaders.trustedIPs }}"
|
|
{{- end }}
|
|
{{- if $config.forwardedHeaders.insecureMode }}
|
|
- "--entrypoints.{{ $entrypoint }}.forwardedHeaders.insecure"
|
|
{{- end }}
|
|
{{- end }}
|
|
{{/* end forwardedHeaders configuration */}}
|
|
{{- if $config.redirectTo }}
|
|
{{- $toPort := index $ports $config.redirectTo }}
|
|
- "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.to=:{{ $toPort.port }}"
|
|
- "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.scheme=https"
|
|
{{- else if $config.redirectPort }}
|
|
{{ if gt $config.redirectPort 0.0 }}
|
|
- "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.to=:{{ $config.redirectPort }}"
|
|
- "--entrypoints.{{ $entrypoint }}.http.redirections.entryPoint.scheme=https"
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- if or ( $config.tls ) ( eq $config.protocol "https" ) }}
|
|
{{- if or ( $config.tls.enabled ) ( eq $config.protocol "https" ) }}
|
|
- "--entrypoints.{{ $entrypoint }}.http.tls=true"
|
|
{{- if $config.tls.options }}
|
|
- "--entrypoints.{{ $entrypoint }}.http.tls.options={{ $config.tls.options }}"
|
|
{{- end }}
|
|
{{- if $config.tls.certResolver }}
|
|
- "--entrypoints.{{ $entrypoint }}.http.tls.certResolver={{ $config.tls.certResolver }}"
|
|
{{- end }}
|
|
{{- if $config.tls.domains }}
|
|
{{- range $index, $domain := $config.tls.domains }}
|
|
{{- if $domain.main }}
|
|
- "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].main={{ $domain.main }}"
|
|
{{- end }}
|
|
{{- if $domain.sans }}
|
|
- "--entrypoints.{{ $entrypoint }}.http.tls.domains[{{ $index }}].sans={{ join "," $domain.sans }}"
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- with .Values.logs }}
|
|
- "--log.format={{ .general.format }}"
|
|
{{- if ne .general.level "ERROR" }}
|
|
- "--log.level={{ .general.level | upper }}"
|
|
{{- end }}
|
|
{{- if .access.enabled }}
|
|
- "--accesslog=true"
|
|
- "--accesslog.format={{ .access.format }}"
|
|
{{- if .access.bufferingsize }}
|
|
- "--accesslog.bufferingsize={{ .access.bufferingsize }}"
|
|
{{- end }}
|
|
{{- if .access.filters }}
|
|
{{- if .access.filters.statuscodes }}
|
|
- "--accesslog.filters.statuscodes={{ .access.filters.statuscodes }}"
|
|
{{- end }}
|
|
{{- if .access.filters.retryattempts }}
|
|
- "--accesslog.filters.retryattempts"
|
|
{{- end }}
|
|
{{- if .access.filters.minduration }}
|
|
- "--accesslog.filters.minduration={{ .access.filters.minduration }}"
|
|
{{- end }}
|
|
{{- end }}
|
|
- "--accesslog.fields.defaultmode={{ .access.fields.general.defaultmode }}"
|
|
{{- range $fieldname, $fieldaction := .access.fields.general.names }}
|
|
- "--accesslog.fields.names.{{ $fieldname }}={{ $fieldaction }}"
|
|
{{- end }}
|
|
- "--accesslog.fields.headers.defaultmode={{ .access.fields.headers.defaultmode }}"
|
|
{{- range $fieldname, $fieldaction := .access.fields.headers.names }}
|
|
- "--accesslog.fields.headers.names.{{ $fieldname }}={{ $fieldaction }}"
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{/*
|
|
For new plugins, add them on the container also
|
|
https://github.com/truecharts/containers/blob/master/mirror/traefik/Dockerfile
|
|
moduleName must match on the container and here
|
|
*/}}
|
|
{{- if .Values.middlewares.themePark }}
|
|
{{/* theme.park */}}
|
|
- "--experimental.localPlugins.traefik-themepark.modulename=github.com/packruler/traefik-themepark"
|
|
{{- end }}
|
|
{{/* End of theme.park */}}
|
|
{{/* GeoBlock */}}
|
|
{{- if .Values.middlewares.geoBlock }}
|
|
- "--experimental.localPlugins.GeoBlock.modulename=github.com/PascalMinder/geoblock"
|
|
{{- end }}
|
|
{{/* End of GeoBlock */}}
|
|
{{/* RealIP */}}
|
|
{{- if .Values.middlewares.realIP }}
|
|
- "--experimental.localPlugins.traefik-real-ip.modulename=github.com/jramsgz/traefik-real-ip"
|
|
{{- end }}
|
|
{{/* End of RealIP */}}
|
|
{{/* ModSecurity */}}
|
|
{{- if .Values.middlewares.modsecurity }}
|
|
- "--experimental.localPlugins.traefik-modsecurity-plugin.modulename=github.com/acouvreur/traefik-modsecurity-plugin"
|
|
{{- end }}
|
|
{{/* CrowdsecBouncer */}}
|
|
{{- if .Values.middlewares.bouncer }}
|
|
- "--experimental.localPlugins.bouncer.modulename=github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin"
|
|
{{- end }}
|
|
{{/* End of ModSecurity */}}
|
|
{{/* RewriteResponseHeaders */}}
|
|
{{- if .Values.middlewares.rewriteResponseHeaders }}
|
|
- "--experimental.localPlugins.rewriteResponseHeaders.modulename=github.com/XciD/traefik-plugin-rewrite-headers"
|
|
{{- end }}
|
|
{{/* End of RewriteResponseHeaders */}}
|
|
{{- with .Values.additionalArguments }}
|
|
{{- range . }}
|
|
- {{ . | quote }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end -}}
|