From 1e074fc79d0f2ee085ea75bf9bacca9115633fa9 Mon Sep 17 00:00:00 2001 From: Kaden Nelson Date: Sun, 14 Jul 2019 11:41:03 -0700 Subject: [PATCH] [stable/traefik] Add support for ACME KeyType (#15303) Signed-off-by: Kaden Nelson --- stable/traefik/Chart.yaml | 2 +- stable/traefik/README.md | 1 + stable/traefik/templates/configmap.yaml | 1 + stable/traefik/values.yaml | 1 + 4 files changed, 4 insertions(+), 1 deletion(-) diff --git a/stable/traefik/Chart.yaml b/stable/traefik/Chart.yaml index 88ef384f8d..91b301fccc 100644 --- a/stable/traefik/Chart.yaml +++ b/stable/traefik/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v1 name: traefik -version: 1.70.2 +version: 1.71.2 appVersion: 1.7.12 description: A Traefik based Kubernetes ingress controller with Let's Encrypt support keywords: diff --git a/stable/traefik/README.md b/stable/traefik/README.md index 8cdd630e42..9d7274c56e 100644 --- a/stable/traefik/README.md +++ b/stable/traefik/README.md @@ -134,6 +134,7 @@ The following table lists the configurable parameters of the Traefik chart and t | `ssl.defaultKey` | Base64 encoded private key for the certificate above | The private key for the certificate above | | `ssl.auth.basic` | Basic auth for all SSL endpoints, see Authentication section | unset by default; this means basic auth is disabled | | `acme.enabled` | Whether to use Let's Encrypt to obtain certificates | `false` | +| `acme.keyType` | KeyType used for generating certificate private key. Allow value 'EC256', 'EC384', 'RSA2048', 'RSA4096', 'RSA8192'. | `RSA4096` | | `acme.challengeType` | Type of ACME challenge to perform domain validation. `tls-sni-01` (deprecated), `tls-alpn-01` (recommended), `http-01` or `dns-01` | `tls-sni-01` | | `acme.delayBeforeCheck` | By default, the provider will verify the TXT DNS challenge record before letting ACME verify. If delayBeforeCheck is greater than zero, this check is delayed for the configured duration in seconds. Useful when Traefik cannot resolve external DNS queries. | `0` | | `acme.dnsProvider.name` | Which DNS provider to use. See [here](https://github.com/xenolf/lego/tree/master/providers/dns) for the list of possible values. | `nil` | diff --git a/stable/traefik/templates/configmap.yaml b/stable/traefik/templates/configmap.yaml index 3a4b6d78d8..9e80a4f6a3 100644 --- a/stable/traefik/templates/configmap.yaml +++ b/stable/traefik/templates/configmap.yaml @@ -259,6 +259,7 @@ data: {{- end }} {{- if .Values.acme.enabled }} [acme] + KeyType = {{ .Values.acme.keyType | quote }} email = {{ .Values.acme.email | quote }} {{- if .Values.kvprovider.storeAcme }} storage = "traefik/acme/account" diff --git a/stable/traefik/values.yaml b/stable/traefik/values.yaml index 69fe65ca03..fc17105ca3 100644 --- a/stable/traefik/values.yaml +++ b/stable/traefik/values.yaml @@ -194,6 +194,7 @@ kvprovider: acme: + keyType: RSA4096 enabled: false email: admin@example.com onHostRule: true