additionalArguments: - '--certificatesresolvers.letsencrypt.acme.email=nvdpoel01@gmail.com' - '--certificatesresolvers.letsencrypt.acme.storage=/ssl-certs/acme.json' - '--certificatesResolvers.letsencrypt.acme.dnschallenge.provider=cloudflare' - >- --certificatesresolvers.letsencrypt.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory - '--certificatesResolvers.letsencrypt.acme.dnschallenge=true' - '--api.insecure=true' additionalVolumeMounts: [] affinity: {} autoscaling: enabled: false deployment: additionalContainers: [] additionalVolumes: [] annotations: {} enabled: true imagePullSecrets: [] initContainers: # - name: volume-permissions # image: busybox:1.31.1 # command: ['sh', '-c', 'chmod -Rv 600 /ssl-certs/*'] # volumeMounts: # - mountPath: /ssl-certs # name: ssl-certs kind: Deployment labels: {} podAnnotations: {} podLabels: {} replicas: 1 terminationGracePeriodSeconds: 60 env: - name: CF_DNS_API_TOKEN valueFrom: secretKeyRef: key: apiKey name: cloudflare envFrom: [] experimental: kubernetesGateway: appLabelSelector: traefik certificates: [] enabled: false plugins: enabled: false globalArguments: - '--global.checknewversion' - '--global.sendanonymoususage' hostNetwork: false image: name: traefik pullPolicy: IfNotPresent ingressClass: enabled: true fallbackApiVersion: null isDefaultClass: true ingressRoute: dashboard: annotations: {} enabled: false labels: {} logs: access: enabled: null fields: general: defaultmode: null names: {} headers: defaultmode: null names: {} filters: {} general: level: DEBUG metrics: prometheus: entryPoint: metrics nodeSelector: {} persistence: accessMode: ReadWriteOnce annotations: {} enabled: true name: ssl-certs path: /ssl-certs size: 128Mi pilot: enabled: false token: '' podDisruptionBudget: enabled: false podSecurityContext: fsGroup: 65532 podSecurityPolicy: enabled: false ports: metrics: expose: false exposedPort: 9100 port: 9100 protocol: TCP traefik: expose: false exposedPort: 9000 port: 9000 protocol: TCP web: expose: true exposedPort: 80 port: 8000 protocol: TCP redirectTo: websecure websecure: expose: true exposedPort: 443 port: 8443 protocol: TCP tls: certResolver: letsencrypt domains: null enabled: true options: null priorityClassName: '' providers: kubernetesCRD: allowCrossNamespace: false allowExternalNameServices: false enabled: true namespaces: [] kubernetesIngress: enabled: true namespaces: [] publishedService: enabled: false rbac: enabled: true namespaced: false resources: {} rollingUpdate: maxSurge: 1 maxUnavailable: 1 securityContext: capabilities: drop: - ALL readOnlyRootFilesystem: true runAsGroup: 65532 runAsNonRoot: true runAsUser: 65532 service: annotations: {} annotationsTCP: {} annotationsUDP: {} enabled: true externalIPs: [] labels: {} loadBalancerSourceRanges: [] spec: {} type: LoadBalancer serviceAccount: name: '' serviceAccountAnnotations: {} tlsOptions: {} tolerations: [] volumes: []