Traefik helm acme. We will also show you how to configure Traefik with Cloudflare. Feb 13, 2020 · Hi there. But I also need it to us an additional "values. traefik-docker-compose. Traefik is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. Attached are the "docker-compose. Helm is a package manager for kubernetes just like npm for NodeJS. Nov 26, 2021 · Install Traefik on Kubernetes. io/charts Install Traefik For each Helm installation, it is better if we specify chart version in our Helm installation. 26 in this case). This kind of storage is mandatory in cluster mode. What changed between the basic example: We replace the web entry point by one for the https traffic: command: # Traefik will listen to incoming request on the port 443 (https) - "--entryPoints. best regards Jan Jan 24, 2022 · I'm trying to get a traefik docker instance running on my raspberry pi 4 8gb. I have the same configuration working with cloudflare dnschallenge. May 25, 2022 · When obtaining an ACME (Let's Encrypt) certificate, sometimes it's more desirable to do DNS challenge, for example, if the server you want to obtain a certificate for does not have a public IP address. In the helm chart, you forbid to use an "acme" configuration when there is more than 1 pod replica. To achieve High Availability with Traefik, multiple instances of Traefik spread across multiple nodes are required. 0 hit GA in September 2019, releasing a host of new features including TCP support with SNI routing, middlewares, canary/traffic mirroring, and IngressRoute Kubernetes CRD. services: traefik: image: 'traefik:2. I defined these values for the chart : Oct 24, 2018 · Automated Kubernetes deployments with GitLab, Helm and Traefik. May 19, 2020 · The Traefik 2 Helm Chart is probably one of the easiest ways to install Traefik on Kubernetes. LuizDMM November 1, 2022, 3:31am 1. yml" file. Automatic cert management feature moved to TraefikEE, leaving open May 1, 2019 · As mentioned, it's a wildcard. 2. Traefik logs concern everything that happens to Traefik itself (startup, configuration, events, shutdown, and so on). json file and it's been populated with a private key but no certificates. edited Jun 20, 2020 at 9:12. FROM traefik:2. I'm trying to have Traefik manage LetsEncrypt for *. [acme] Close created file in ACME local store CheckFile func (#10574 by testwill) [docker,http3] Update to quic-go v0. Traefik supports PROXY protocol version 1 and 2. trustedIPs. 9 ( #10572 by mloiseleur ) [docker,marathon,rancher,ecs,tls,nomad] Allow to configure TLSStore default generated certificate with labels ( #10439 by kevinpollet ) Traefik Enterprise requires a Certificate Resolver to be defined in the static configuration, which is responsible for retrieving certificates from an ACME server. container_name: "traefik". Traefik Proxy facilitates the automated generation of TLS certificates by using Lets-Encrypt. This ensures at least one instance is available to serve requests even if some nodes or instances are down. yml", ". This IP will become the entry point forall the apps routed by Traefik in your cluster. Traefik itself is exposed via a service of type LoadBalancer, which results in a public IP address. I use GandiV5 DNS resolver to get certificates for traefik. 3 now everything works) Aug 24, 2021 · This article demonstrates how to install Consul and Traefik Proxy 2. yml additionalArguments: - --certificatesresolvers. Dec 6, 2019 · Running Traefik 1. As a Key Value Store Entry. I want to store the certs as suggested on a persistantVolume. Sep 4, 2018 · In addition to the above answer, to automate the creation of the acme. 1". email with your e-mail address and configure loadBalancerIP so it is set to the static IP we’ve prepared in step #4. (My name registrar is Porkbun) Here's my docker-compose : Version: '3. based on that, you don't use Traefik installed together with K3S, so you don't have to use HelmChartConfig. Nov 25, 2020 · service/cert-manager-webhook ClusterIP 10. 247. Traefik & CRD & Let's Encrypt. 0/routing/providers/kubernetes-crd/. yaml can be found in relevant chart repository: Traefik Proxy Helm Chart. Aug 30, 2020 · Hi all I just created a fresh kubernetes cluster and created a namespace called 'routing' In here I created the latest traefik via the helm chart (2. By default, the logs are written to the standard output. 1 Answer. Traefik 文档，traefik 是一个负载均衡器，可以对后端服务进行反向代理，同时支持服务自动发现 Let`s Encrypt - Traefik 中文网 - 最新中文文档 Skip to content Explanation. File (TOML) Kubernetes. You should be able to access Traefik on the external IP on port 80, add the external IP to your DNS nameserver. It is highly recommended you use cert-manager instead of the built-in ACME support in Traefik, at least at this time. Traefik Enterprise Helm Chart. Jun 30, 2023 · Yes i want to use dns challange with netcup, and yes i want to use a wildcard cert. Traefik Ingress (Kubernetes) not receiving letsencrypt certificates. If you change anything within the values. Aug 23, 2019 · I am having difficulty with setting up Traefik as the Ingress on my DigitalOcean managed Kubernetes cluster using Helm and the official traefik chart to install. hostname: "traefik". Together with Cert-Manager, Traefik makes the TLS setup very easy. Aug 27, 2023 · we are gonna install traefik using helm. Oct 25, 2020 · In a Kubernetes setting, Traefik is deployed as follows using HelmRelease: apiVersion: helm. yaml # Environment variables to be passed to Traefik's binary env: - name: CF_API_KEY valueFrom: secretKeyRef: name: cloudflare-credentials key: CF_API_KEY - name: CF_API_EMAIL valueFrom: secretKeyRef: name: cloudflare-credentials key: CF_API_EMAIL Before deploying Oct 3, 2022 · Hello, I would like share with you a working example of Helm Values used to overwrite the defaults in order to configure Traefik Ingress to retain the Client Original Ip in the headers X-Forwarded-For and X-Real-Ip. I've set up traefik in the following manner (Much based on this guide). apiVersion: v1 kind: Secret metadata : name: cloudflare namespace: traefik type: Opaque stringData : Traefik can use a default certificate for connections without a SNI, or without a matching domain. The default network is set to the one created in the first step, as it will be set in all other compose files. io/v1 kind: HelmChartConfig metadata: name: traefik namespace: kube-system spec: valuesContent: |- additionalArguments: - --log. com" storage: "/data/acme Jul 8, 2020 · Quickstart with Traefik v2 on Kubernetes. runAsNonRoot=false \ --set ports. RUN touch /acme. I changed it to a read-write token and it worked fine. There is another LB in front of traefik - the google LB to the nodes that GKE creates for traefik. A Kubernetes native ingress controller: Traefik Proxy 2. In the Traefik Enterprise static configuration, you'll need to enable the Distributed ACME certificate resolver as well as the Vault KV provider. This document is intended to be a fully working example demonstrating how to set up Traefik in Kubernetes , with the dynamic configuration coming from the IngressRoute Custom Resource , and TLS setup with Let's Encrypt . best regards Jan In this configuration, the priority is configured to allow Router-2 to handle requests with the foobar. There are ways to make sure the service uses Apr 22, 2020 · no cloudfront though I was thinking of honestly sticking it on top to terminate ssl if I couldn't figure this out haha. json file) but my IngressRoute doesn't use these certificate for the route. This guide aim to demonstrate how to create a certificate with the Let's Encrypt HTTP challenge to use https on a simple service exposed with Traefik. g. but I also enabled the access logs so the only log I get is when I try to access Nov 28, 2023 · I have the following configuration defined in my helm values file: deployment: initContainers: - name: volume-permissions image: busybox:latest command: ["sh", "-c Apr 6, 2021 · To install Traefik (v2) on Kubernetes, we will be using the official Traefik helm chart. By default, the logs use a text format ( common ), but you can also ask for the json format in the format Aug 3, 2023 · Delete ACME record from DNS - I use Cloudflare and my domain is registered with Porkbun - so I logged into each and removed the ACME DNS record. address=:80,--entryPoi…. Note that the chart is maintained by the community and not by the folks at Traefik. I expected to get a letsencrypt cert after a few minutes, but it has been like this for a day now. Mount of traefik. json file; Restart Traefik; Wait a few minutes for new certificates to be generated. # hostIP: 192. yaml. Challenges must be defined in the certificate resolver in order to resolve certificates. When deployed the services are available at the domain, BUT the certificate is read as self-signed and therefore invalid. This for the fact that requesting certs is rateLimited and in case of pod restarts the cert would get lost. json; Install Traefik. Use kubectl get svc traefik -n kube-system to check. yaml May 6, 2023 · apiVersion: helm. 4; What we tried Aug 5, 2020 · In Traefik v1, there was beta support for clustering / HA mode using a KV store (e. I followed a tutorial and the instructor used Cloudflare, but I would like to use Lets Encrypt. 25. The certificate resolver will issue requests to the Distributed ACME agent, and the Vault KV provider is in charge of fetching certificates from the Vault server that Usage. json \. Traefik 2. 6 <none> 443/TCP 24h. x config. Ok, I'm trying to use Traefik with K8S for the first time. May 24, 2019 · The above command uses Helm to install the stable/traefik chart. No logs from the traefik pod. address=:443" ports: - "443:443". You can add the Traefik Helm Repository like below: helm repo add traefik https://traefik. Oct 15, 2021 · I can visit subdomain. According to the logs, the challenge was succesfully validated and a certificate was issued, however any attempts to connect to my endpoint fail at the SSL handshake. I install traefik using helm, listen port 80 and 443. challengeType: 'dns-01'. le Mar 22, 2019 · Having the very same issue, using Traefik v1. Below is my full config that is used for stable/traefik (helm chart) and installed in Azure AKS. Execute the following command to create a namespace called deployment (arbitrary) for your application. May 1, 2020 · Setting up SSL-Encryption with Traefik is incredibly easy due to the included ACME resolver. I had been using the stable helm build of Traefik, which uses v1. Apr 10, 2020 · If I did something wrong, its not obvious from the documentation. Sep 10, 2023 · Add Traefik helm repository helm repo add traefik https://traefik. 100. Step 1: Create Secret and Issuer needed by cert-manager with your API Token. com SSL certifi… Jan 11, 2022 · Step 3: Create the Traefik base configuration. level=ERROR - --accesslog=false - --glob… Get you file permissions set up correctly, so Traefik can read from and write to the file. 233. Jan 14, 2021 · Hello, I am using Traefik 2. Traefik Enterprise requires a Certificate Resolver to be defined in the static configuration, which is responsible for retrieving certificates from an ACME server. Install Traefik using Helm and apply values. ruleSyntax option allows to configure the rule syntax to be used for parsing the rule on a per-router basis. key. I have no idea what went wrong, but this was the fix. kubectl create namespace deployment. The different kinds of challenges supported are: TLS, HTTP and DNS. version: "3. json file and assign the required permissions, create a Dockerfile and call it in your docker. I'm currently using a K8s claim for storing the acme. 0. traefik. env" and "traefik debug log during startup". dnschallenge=true --certificatesresolvers. While the team at Containous (the creators of Traefik) did a great job laying out the migration steps from v1 to v2 Sep 29, 2020 · I manage to get the certificate (well present in the acme. Helm makes it easy to deploy applications onto your Kubernetes cluster. 2) helm upgrade --install traefik traefik/traefik --version 9. acme. This document is intended to be a fully working example demonstrating how to set up Traefik in Kubernetes , with the dynamic configuration coming from the IngressRoute Custom Resource , and TLS setup with Let's Nov 1, 2022 · kubernetes-helm. websecure. # # -- You SHOULD NOT expose the traefik port on production deployments. I would recommend following the following workshops: Getting started with Traefik on K8S. RuleSyntax¶ Optional, Default="" In Traefik v3 a new rule syntax has been introduced (migration guide). See cert-manager documentation for creating this token with needed rights: ---. com with domain. Introduction. yml file, add the following configurations, save the file, and close the editor. There are 3 ways to configure the backend protocol for communication between Traefik and your pods: Setting the scheme explicitly (http/https/h2c) Configuring the name of the kubernetes service port to start with https (https) Setting the kubernetes service port to use port 443 (https) If you do not configure the above, Traefik will assume an Nov 21, 2019 · In the Helm Chart for Traefik v1 (which is community maintained: it's not completely managed by the Traefik project), there could be an improvement so this boolean is also checked against the string value "false", and eventually improve the feature by passing a custom ACME URL so other systems than Let's Encrypt can be used. Dec 16, 2022 · 4. yml with these user options (values. To deploy Traefik Enterprise in the default Kubernetes namespace: helm install traefikee traefik/traefikee. Following the docs for v2, I've created a new YAML file for my Traefik container and added a bunch of new labels to my Docker Compose file. For awhile all my ingress endpoints worked great using Let's Encrypt. It takes four parameters to configure automatic certificate generation and additional two annotations for using these certificates on a Traefik Proxy-configured domain. Traefik with an IngressRoute Custom Resource Definition for Kubernetes, and TLS Through Let's Encrypt. This allows Sep 10, 2019 · I am trying to get TCP working on K8, I followed the yaml here apiVersion: traefik. ingressclass=some-ingress-classname". domain. On Kubernetes; On Google Cloud Platform; App version: 2. xx - --certificatesresolvers. {{- if Nov 3, 2023 · 1. le. 0 --namespace routing -f values. Sorted by: 1. X in an "on premise" kubernetes cluster. Flux supports Helm releases. provider=godaddy May 6, 2023 · apiVersion: helm. 10 which you can install with this command: kubectl apply -f https://github helm install traefik-ingress stable/traefik -n kube-system --values traefik-values. Traefik Helm values. 196. Configure Traefik Enterprise. This makes wildcard Let's Encrypt certificates possible. I have everything setup, but I can't get the let's encrypt certification working. Oct 6, 2020 · store the certificates in /certs/acme. Next, create a deployment. cd kubernetes. kubernetesingress. Although, it is recommended to deploy Traefik Enterprise in a separate namespace: helm install traefikee traefik/traefikee --namespace traefikee --create-namespace. override the default Traefik configuration values (yaml file or cli) append your own configurations (kubectl apply -f myconf. Create sample apps. May 29, 2020 · I'm definitely open to using cert-manager. yml I can see the pod running fine. helm install traefik traefik/traefik --namespace=traefik --values=values. Oct 26, 2021 · Traefik Proxy provides TLS support using minimal parameters. Apr 11, 2019 · According the official document of Traefik HA, it seems you have only one option in order traefik detect those certificates within a cluster mode. cert-manager 1. Helm is required to use and operate these charts. A typical way of installing Traefik is to create a service account, RBAC, deployment, and Service (of load balancer type) to expose Traefik. yaml and want to update the Traefik proxy this can be done by executing: helm upgrade traefik traefik/traefik --namespace=traefik --values=values. It is much better at dealing with multiple copies of Traefik, which you probably want. web. 1. io/traefik/v3. I am running traefik in a k3s kubernetes cluster, installed via helm (not using the traefik preinstalled by k3s). 10 # Defines whether the port is exposed if service. us/v1alpha1 kind: IngressRouteTCP metadata: name: ingressroutetcp. Let's Encrypt on Traefik with Helm. yml. 0 and docker/cli v24. However, Traefik v2 removed support for storing ACME/Let’s Encrypt certificates in a KV store, citing bugs with the raft consensus algorithm (#4851, #3487, #5047, #3833). 5. You can configure a file path instead using the filePath option. Enable ACME. I deploy Traefik v2 from the official Helm Chart : helm install traefik traefik/traefik -f traefik-values. This default certificate should be defined in a TLS store: File (YAML) # Dynamic configuration tls: stores: default: defaultCertificate: certFile: path/to/cert. Apr 3, 2021 · I have been trying to get traefik v2. yaml) extend this HelmChart (as a Subchart) Installing Prerequisites. port=80 --set ports. either through a definition in the dynamic configuration, or through Let's Encrypt (ACME) I tried ACME first and succeeded the working config like these: # traefik flags --certificatesresolvers. 42. ceresimaging. Traefik Hub Helm Chart. May 18, 2020 · After looking deeper, I attempted to use the pod security policy to allow this, but get the same issue: helm install \ --set hostNetwork=true \ --set podSecurityPolicy. 22). 9, you can install the helm chart with this command: helm install traefik traefik/traefik. I'm attaching all logs and overriden helm chart values in a gist: I'd apreciate if someone could explain to me what is wrong as I can not Jun 19, 2022 · helm install -n traefik-v2 traefik traefik/traefik. # Wait for the external IP to be assigned by watching the traefik service (CTRL+C to exit) kubectl get svc traefik -n kube-system -w. additionalArguments : - "--providers. fluxcd. yml): #traefik-custom-values. I've double checked the details and it forwards 80 & 443 properly, and no firewalls on the instances from what I can see. As this does not look like it is caused by the helm chart, I am opening up this bug report. # Wait for the traefik pod to be 'Running' (CTRL+C to exit) kubectl get pod -n kube-system -w. 0 gave the error, but with v2. Related: A Getting Started Guide to Kubernetes Namespaces. Next, you will need to configure the Traefik Jun 30, 2023 · Yes i want to use dns challange with netcup, and yes i want to use a wildcard cert. With the command helm version, make sure that you have: Helm v3 installed; Add Traefik’s chart repository to Helm: Feb 23, 2022 · Hello @nodesocket Regarding the Cloudflare configuration and its sensitive data you can create the following array in the values. 7. First, check if your DNS provider is supported by lego(the ACME library that Traefik is using). 7". yml is what gives the static traefik configuration. Also security of yourself and your users should always be a critical concern. Traefik can also be installed using the official Helm Chart. dnschallenge. It seems that the letsencrypt acme for duckdns never execute. x letsencrypt module to work with duckdns for a few days now. Jan 2, 2022 · Officially Traefik provides an official Helm chart for deployment, the source is on GitHub with this link (we will go back to check the values. type is LoadBalancer or # NodePort. certResolvers: myresolver: email: "nettemsarath1@gmail. acmeLogging: true. json file is created with the certificate's private key pouplated and the state marked as valid - Any request to the generated subdomain is answered with the Traefik default certificate Configuration is similar to the one posted by Paul. io/v1 kind: HelmRelease metadata: name: traefik-default namespace: kube-system spec: chart: The Traefik Enterprise Helm Chart provides support for deploying and upgrading core components such as the Controllers, Proxies and Plugin Registry, without applying any runtime configuration by default. Stop Traefik and delete the acme. If the PROXY protocol header is passed, then the version is determined automatically. Specs. However, now all my ingress endpoints are serving the default example. 18 in Kubernetes via official Helm chart. . Jun 1, 2018 · I was getting a 403 because Traefik was trying to write a TXT entry for ACME DNS challenge in my DigitalOcean domain using a read-only token. containo. Starting with v28. Replace acme. If PROXY protocol header parsing is enabled for the entry point, this entry point can accept connections with or without PROXY protocol headers. com`) services: - name: whoamitcp port: 8080 tls: secretName: foosecret passthrough: false options: name: myTLSOption namespace: default What should the Apr 16, 2019 · Im struggling to get Traefik working on K8s with ACME enabled. Share Sep 4, 2020 · Hi, Im confused by the doc a little bit So to config the ingress using tls cert, there are mainly to ways. services: traefik: image: "traefik:v2. A cloudflare account on a DNS Zone. 3'. Let's create some sample apps, to be routed by Traefik. As a first step, you’ll need to create a Kubernetes namespace: kubectl create namespace traefik Before you deploy the Helm chart, you’ll need to add the secret containing the Cloudflare credentials along with the configmap including the static configuration. Jan 17, 2023 · A public hosted DNS domain for Let’s Encrypt — for the purpose of this article I will use Cloudflare. Several restarts of the traefik pod does not seem to have any effect. This install will also depend on our dynamic DNS provider, which allows network traffic into our cluster. This is my helm values version 8. My cluster is a K3D cluster. && chmod 600 /acme. enabled=true \ --set securityContext. compose. 7, along with cert-manager which worked great from the cert lifecycle perspective. We configure the TLS Let's Encrypt challenge: command: # Enable a tls challenge named Mar 31, 2021 · Traefik Proxy is a HTTP reverse proxy and load balancer that’s handling the edge/ingress traffic in Kubernetes and connects path and sub paths to a micro-service / container. Mar 23, 2022 · I'm trying to install Traefik on a K8s cluster using ArgoCD to deploy the official Helm chart. Oct 20, 2023 · In this tutorial, we will show you how to install and configure Traefik using the official Helm chart. x, this chart now bootstraps Traefik Proxy version 3 as a Kubernetes ingress controller, using Custom Resources IngressRoute: https://doc. When I finished all the settings, HTTPS was enabled, but with self-signed certificates. Oct 3, 2022 · Hello, I would like share with you a working example of Helm Values used to overwrite the defaults in order to configure Traefik Ingress to retain the Client Original Ip in the headers X-Forwarded-For and X-Real-Ip. com host. Prerequisite Step the Gcloud CLI must be installed and configured. answered Apr 5, 2020 at 12:36. Hoping someone can help me understand what's going on with my setup. Moreover, it is compatible with every option you need (with the help of the additionalArguments section) and will ensure your Traefik is always up to date. Using Helm Traefik chart, we can use a values file such as: We would like to show you a description here but the site won’t allow us. Traefik Proxy provides also TLS offloading with Lets Encrypt support. Here, in detail, we explain how to deploy Traefik by using the official Helm Chart. 5, on a fresh Kubernetes cluster, first in a development environment, and then moved to production. Feb 7, 2022 · I'm using the traefik helm chart as a sub-chart of our existing 'ra' service, no cert-manager; I'm using ACME http challenge letsencrypt; The traefik service has bound the correct (specified) GKE loadBalancerIP on ports :80 and :443 (which matches the dns records for ra. 4'. email=me@fqdn. json. When I try to specify in the Application yaml file what additional values file to use, it fails to file not found for it. io/charts. ACME certificates can be stored in a KV Store entry. Thank you for any pointers. Ingress-shim (which is a default part of cert-manager) will handle Traefik-backed Ingresses just fine. However, for the sake of simplicity, we're using k3s docker image for the Kubernetes cluster setup. cattle. If you haven't seen it already, be sure to check out my May 20, 2024 · ACME support in step-ca means you can easily run your own ACME server to issue certificates to internal services and infrastructure in production, development, and other pre-production environments. github. level=ERROR Oct 27, 2020 · The most recommended solution is to use cert-manager instead of LetsEncrypt. Nov 18, 2022 · In this tutorial, you will set up cert-manager, Traefik, and Let’s Encrypt in your Kubernetes cluster, along with an example website service, to acquire, renew, and use secure certificates with your website automatically. 1; Helm chart: traefik-10. Documentation and the default values. restart: 'unless-stopped'. yaml for overriding config on helm chart or see the default settings). 168. Jun 25, 2020 · I think I can answer this question because I see same additional /tcp path when redirecting into https. 2. Hi, I installed traefik using the official helm chart using the following commands: helm upgrade --install traefik traefik/traefik --namespace traefik --set="additionalArguments= {--entryPoints. 9. Consul, etcd, etc). Initially I had a problem with declaring a common middleware across my containers which defines a bunch of HTTPS headers, redirecting HTTP-to Feb 25, 2022 · Github Issue at the traefik-helm-chart repository: traefik/traefik-helm-chart#564. May 28, 2020 · Hello Everyone, my Traefik Ingress can't get the TLS certificate from let's encrypt 🙁 I used helm v3 to deploy to k8s: helm install traefik traefik/traefik helm upgrade traefik traefik/traefik --values traefik-custom-values. Oct 12, 2019 · If this solution does not work for you with the result that the Traefik container itself does not start giving the error: command traefik error: failed to decode configuration from flags: field not found, node: http try to update the Traefik version to the latest available (with me v2. The next step is to create the Kubernetes secret that will hold the You may want # to set this value if you need traefik to listen on specific interface # only. com but I get served Traefik's default cert. crt keyFile: path/to/cert. There is no reason not to use it, as search engines usually rank pages without HTTPS lower than pages which implement the protocol. 3. proxyProtocol. port=443 \ traefik traefik/traefik Jul 17, 2019 · I've setup a TXT record in my dns and configured traefik with acme with dns-01 challenge. com as a SAN. 1. On the surface It's running great, new certs get applied to the do… Sep 25, 2019 · Hi, I'm also relatively new to Traefik v2 and still trying to get my head around how to migrate my v1. crd namespace: default spec: entryPoints: - footcp routes: - match: HostSNI(`bar. net, loadBalancerIP=104. Also here is How to easily (ish!) get SSL/TLS configured for your web hosting needs using Traefik and cert-manager on Kubernetes article for you that shows Jun 26, 2021 · How to painlessly deploy and configure Traefik v2 on Kubernetes as the Ingress Controller with automated Let’s Encrypt ACME wildcard TLS certs Sep 13, 2020 · I do not have https lets encrypt configured but I think the page should still show me the text when I accept the browsers warning. First, create your RBAC resources. 9 + wildcard certificate + dreamhost - DNS challenge is correctly performed, as an acme. Apr 21, 2021 · Now we can install Traefik in our cluster with Helm using the values file: Traefik should be running as expected in the traefik-system namespace: Take note of the external-ip of the service (35. bw na kz th wu qg kr lw kd ld