- insecure mode Dashboard was returning 404 because api.insecure was set to false, which disables the dashboard API on port 8080.
50 lines
1.2 KiB
YAML
50 lines
1.2 KiB
YAML
apiVersion: helm.cattle.io/v1
|
|
kind: HelmChartConfig
|
|
metadata:
|
|
name: traefik
|
|
namespace: kube-system
|
|
spec:
|
|
valuesContent: |-
|
|
# 3 replicas for HA
|
|
deployment:
|
|
replicas: 3
|
|
|
|
# Pod Anti-Affinity - 각 노드에 최대 1개씩만 배치
|
|
affinity:
|
|
podAntiAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
- labelSelector:
|
|
matchLabels:
|
|
app.kubernetes.io/name: traefik
|
|
topologyKey: kubernetes.io/hostname
|
|
|
|
# Master 노드에도 배치 허용
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/master
|
|
operator: Exists
|
|
- key: node-role.kubernetes.io/control-plane
|
|
operator: Exists
|
|
|
|
# Traefik Dashboard 활성화
|
|
dashboard:
|
|
enabled: true
|
|
|
|
# API 활성화 (Dashboard에서 필요)
|
|
api:
|
|
dashboard: true
|
|
|
|
# CLI 추가 인자 (insecure는 helm values에 없어서 직접 추가)
|
|
additionalArguments:
|
|
- "--api.insecure=true"
|
|
|
|
# ports 설정
|
|
ports:
|
|
traefik:
|
|
expose:
|
|
default: true
|
|
|
|
# svclb tolerations for master node
|
|
service:
|
|
annotations:
|
|
svccontroller.k3s.cattle.io/tolerations: '[{"key":"node-role.kubernetes.io/master","operator":"Exists","effect":"NoExecute"}]'
|