diff --git a/stable/traefik/Chart.yaml b/stable/traefik/Chart.yaml index e8d205cf01..9cc79136ee 100755 --- a/stable/traefik/Chart.yaml +++ b/stable/traefik/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v1 name: traefik -version: 1.57.1 +version: 1.58.0 appVersion: 1.7.6 description: A Traefik based Kubernetes ingress controller with Let's Encrypt support keywords: diff --git a/stable/traefik/templates/configmap.yaml b/stable/traefik/templates/configmap.yaml index 7c1ac6e159..4a8d03bf25 100644 --- a/stable/traefik/templates/configmap.yaml +++ b/stable/traefik/templates/configmap.yaml @@ -235,6 +235,9 @@ data: {{- if .Values.kvprovider.importAcme }} storageFile = "/acme/acme.json" {{- end }} + {{- if or (.Values.kvprovider.importAcme) (eq .Release.Revision 1) }} + OverrideCertificates = true + {{- end }} {{- else }} storage = "/acme/acme.json" {{- end }} diff --git a/stable/traefik/templates/storeconfig-job.yaml b/stable/traefik/templates/storeconfig-job.yaml index a373726f50..81d282f626 100644 --- a/stable/traefik/templates/storeconfig-job.yaml +++ b/stable/traefik/templates/storeconfig-job.yaml @@ -2,17 +2,16 @@ apiVersion: batch/v1 kind: Job metadata: - name: "storeconfig-job" + name: "storeconfig-job-{{ .Release.Revision }}" annotations: - "helm.sh/hook": post-install - "helm.sh/hook-delete-policy": hook-succeeded + "helm.sh/hook": post-install,post-upgrade labels: chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" app: {{ template "traefik.name" . }} spec: template: metadata: - name: "storeconfig-job" + name: "storeconfig-job-{{ .Release.Revision }}" labels: app: {{ template "traefik.name" . }} chart: "{{ .Chart.Name }}-{{ .Chart.Version }}" diff --git a/stable/traefik/values.yaml b/stable/traefik/values.yaml index b79928b699..b7bff68f3e 100755 --- a/stable/traefik/values.yaml +++ b/stable/traefik/values.yaml @@ -246,8 +246,10 @@ acme: AWS_SECRET_ACCESS_KEY: "" vultr: VULTR_API_KEY: "" - ## Save ACME certs to a persistent volume. WARNING: If you do not do this, you will re-request - ## certs every time a pod (re-)starts and you WILL be rate limited! + ## Save ACME certs to a persistent volume. + ## WARNING: If you do not do this and you did not have configured + ## a kvprovider, you will re-request certs every time a pod (re-)starts + ## and you WILL be rate limited! persistence: enabled: true annotations: {}