[stable/traefik] Add support for ACME KeyType (#15303)

Signed-off-by: Kaden Nelson <kadenlnelson@gmail.com>

stable/traefik/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: traefik
-version: 1.70.2
+version: 1.71.2
 appVersion: 1.7.12
 description: A Traefik based Kubernetes ingress controller with Let's Encrypt support
 keywords:

stable/traefik/README.md

@@ -134,6 +134,7 @@ The following table lists the configurable parameters of the Traefik chart and t
 | `ssl.defaultKey`                       | Base64 encoded private key for the certificate above                                                                         | The private key for the certificate above         |
 | `ssl.auth.basic`                       | Basic auth for all SSL endpoints, see Authentication section                                          | unset by default; this means basic auth is disabled |
 | `acme.enabled`                         | Whether to use Let's Encrypt to obtain certificates                                                                          | `false`                                           |
+| `acme.keyType`                         | KeyType used for generating certificate private key. Allow value 'EC256', 'EC384', 'RSA2048', 'RSA4096', 'RSA8192'.                                                                          | `RSA4096`                                           |
 | `acme.challengeType`                   | Type of ACME challenge to perform domain validation. `tls-sni-01` (deprecated), `tls-alpn-01` (recommended), `http-01` or `dns-01` | `tls-sni-01`                                |
 | `acme.delayBeforeCheck`         | By default, the provider will verify the TXT DNS challenge record before letting ACME verify. If delayBeforeCheck is greater than zero, this check is delayed for the configured duration in seconds. Useful when Traefik cannot resolve external DNS queries. | `0` |
 | `acme.dnsProvider.name`                | Which DNS provider to use. See [here](https://github.com/xenolf/lego/tree/master/providers/dns) for the list of possible values. | `nil`                                         |

stable/traefik/templates/configmap.yaml

@@ -259,6 +259,7 @@ data:
     {{- end }}
     {{- if .Values.acme.enabled }}
     [acme]
+    KeyType = {{ .Values.acme.keyType | quote }}
     email = {{ .Values.acme.email | quote }}
     {{- if .Values.kvprovider.storeAcme }}
     storage = "traefik/acme/account"

stable/traefik/values.yaml

@@ -194,6 +194,7 @@ kvprovider:
 
 
 acme:
+  keyType: RSA4096
   enabled: false
   email: admin@example.com
   onHostRule: true