一、搭建

部署步骤

helm repo add traefik https://helm.traefik.io/traefik

helm repo update

下载traefik

#查看traefik的版本

root@master24:# helm search repo traefik

NAME??????????? CHART VERSION?? APP VERSION DESCRIPTION

stable/traefik??1.87.7??????????1.7.26??????DEPRECATED - A Traefik based Kubernetes ingress...

traefik/traefik?10.6.2??????????2.5.4???????A Traefik based Kubernetes ingress controller

#下载

helm pull traefik/traefik

# 下载指定版本：

?helm pull traefik/traefik --version?10.6.2

???

解压后,修改values.yaml

a.修改service

b.修改additionalArguments对应的值

增加：?

 ?-?"--api.dashboard=true"

??-?"--api.dashboard=true"

??-?"--providers.kubernetesingress.ingressclass=traefik"   # 设置ingressclass

c.挂载

storageClass:这个可以挂可不挂

根据你透露的页面去访问traefik

二、traefik 开放 80 端口

traefik多数限制依靠Middlewares，因为暴露在公网，域名几乎全是https的，但内部调用确是http的，就会牵扯到traefik将https转成http，但traefik默认的是8000和8443，所以就要改下，改成80，443

直接改的话会报错

traefik error: error while building entryPoint web: error preparing server: error opening listener: listen tcp :80: bind: permission denied

修改 helm chart values 文件为

hostNetwork: true
ports:
  web:
    port: 80
    redirectTo: websecure
  websecure:
    port: 443

securityContext:
  capabilities:
    drop: [ALL]
    add: [NET_BIND_SERVICE]		# 开放绑定端口
  readOnlyRootFilesystem: true
  runAsGroup: 0
  runAsNonRoot: false
  runAsUser: 0

然后 helm upgrade 更新一下本地的 release 即可解决。

三、traefik设置默认http跳转https

--entrypoints.web.address=:80
--entrypoints.web.http.redirections.entryPoint.to=websecure
--entrypoints.web.http.redirections.entryPoint.scheme=https
--entrypoints.websecure.address=:443

设置点在