kube/traefik/values.yml

69 lines
1.6 KiB
YAML
Raw Normal View History

2022-08-16 09:40:54 +00:00
image:
2023-07-25 17:23:23 +00:00
registry: mirror.gcr.io/library
tag: "3.1.0"
2023-07-25 17:23:23 +00:00
pullPolicy: IfNotPresent
2022-08-16 09:40:54 +00:00
websecure:
tls:
enabled: true
providers:
kubernetesCRD:
enabled: true
2023-08-13 15:35:25 +00:00
allowEmptyServices: true
allowExternalNameServices: true
2022-08-16 09:40:54 +00:00
kubernetesIngress:
allowEmptyServices: true
2022-08-16 09:40:54 +00:00
allowExternalNameServices: true
publishedService:
enabled: true
2022-08-16 09:40:54 +00:00
deployment:
2024-08-15 09:43:08 +00:00
replicas: 4
2022-08-16 09:40:54 +00:00
annotations:
keel.sh/policy: minor
keel.sh/trigger: patch
keel.sh/pollSchedule: "@midnight"
2022-09-11 13:24:35 +00:00
accessLog:
format: json
2022-08-16 09:40:54 +00:00
# Globally redirect to https://
globalArguments:
- --entryPoints.web.http.redirections.entryPoint.to=:443
- --entryPoints.web.http.redirections.entryPoint.scheme=https
service:
annotations:
external-dns.alpha.kubernetes.io/hostname: traefik.k-space.ee
2022-08-16 09:40:54 +00:00
spec:
externalTrafficPolicy: Local
ingressRoute:
dashboard:
enabled: true
domain: traefik.k-space.ee
matchRule: Host(`traefik.k-space.ee`) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))
entryPoints: ["websecure"]
2024-07-27 00:15:41 +00:00
middlewares:
- name: "dashboard"
- name: "dashboard-redirect"
2022-08-16 09:40:54 +00:00
tlsOptions:
default:
minVersion: VersionTLS12
cipherSuites:
# TLS 1.1 and 1.2 ciphers
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
# TLS 1.3 ciphers
- TLS_AES_128_GCM_SHA256
- TLS_AES_256_GCM_SHA384
- TLS_CHACHA20_POLY1305_SHA256