Traefik via Helm
helm repo add traefik https://helm.traefik.io/traefik
helm install traefik traefik/traefik --namespace traefik --create-namespace --values traefik-values.yaml
Cert-Manager
Cert Manager will be used as it will store certs in a secret, therefore accessible for every pod. In contrast to this, Traefik stores certs on disk, so a volume would be needed in RWX mode (too much effort).
Issuer - CA
An issuer is a CA. This can be done with 2 different kinds.
Issuer
can be used in the namespace they are created in.
Cluster Issuer
can be used throughout the whole cluster, not limited to a specific namespace. i.e. general issuer for all namespaces in cluster.
Troubleshooting steps
kubectl create deploy nginx --image=nginx -n test k create svc -n test clusterip nginx --tcp=80 k scale --replicas=3 deployment/nginx -n test
k get po -n test -o wide k create svc -n test clusterip nginx k create svc -n test clusterip nginx --tcp=80 k get svc -n test dig k.internal.schnrbs.work dig k8s.internal.schnrbs.work dig n.k8s.internal.schnrbs.work k apply -f traefik_lempa/nginx-ingress.yaml k delete ingress nginx-ingress k apply -f traefik_lempa/nginx-ingress.yaml k get svc -n test k get ingress k get ingress -n test helm upgrade traefik traefik/traefik --namespace traefik --create-namespace --values traefik_lempa/traefik-values.yaml helm upgrade traefik traefik/traefik --namespace traefik --create-namespace --values traefik_lempa/traefik-values.yaml k get svc ingressRoute k get svc ingressRoutes k get svc ingressroutes.traefik.io k get ingressroutes.traefik.io --all-namespaces helm upgrade traefik traefik/traefik --namespace traefik --create-namespace --values traefik_lempa/traefik-values.yaml exit helm repo add jetstack https://charts.jetstack.io --force-update helm install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --values cert-manager-values.yaml helm install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --values traefik_lempa/cert-manager-values.yaml echo -n 'P96My4uiHudZtiC2ymjSGQ0174CoRBnI9ztmA0Wh' | base64 k get po alias k=kubectl k get po k apply traefik_lempa/cert-manager-issuer-secret.yaml k apply -f traefik_lempa/cert-manager-issuer-secret.yaml k get secret k get secrets k get secret -n cert-manager k apply -f traefik_lempa/cert-manager-cluster-issuer.yaml k get clusterissuers.cert-manager.io k apply -f traefik_lempa/nginx-certificate.yaml k apply -f traefik_lempa/nginx-ingress.yaml k apply -f traefik_lempa/cert-manager-cluster-issuer.yaml