[stable/traefik] Add acme dns resolvers configuration (#11112)

* [stable/traefik] Add acme.dnsChallenge.resolvers

`resolvers` configuration is not available into Helm deployment but it
could be necessary for Letsencrypt DSN challange.

Signed-off-by: Emmanuel CARRE <emmanuelCarre@users.noreply.github.com>

* [stable/traefik] Bumped chart version

Signed-off-by: Emmanuel CARRE <emmanuelCarre@users.noreply.github.com>

stable/traefik/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: traefik
-version: 1.63.1
+version: 1.64.0
 appVersion: 1.7.9
 description: A Traefik based Kubernetes ingress controller with Let's Encrypt support
 keywords:

stable/traefik/README.md

@@ -143,6 +143,7 @@ The following table lists the configurable parameters of the Traefik chart and t
 | `acme.domains.domainsList`             | List of domains & (optional) subject names                                                                                   | `[]`                                              |
 | `acme.domains.domainsList.main`        | Main domain name of the generated certificate                                                                                | *.example.com                                     |
 | `acme.domains.domainsList.sans`        | optional list of alternative subject names to give to the certificate                                                        | `[]`                                              |
+| `acme.resolvers`                       | DNS servers list to use for DNS challenge                                                                                    | `[]`                                              |
 | `acme.persistence.enabled`             | Create a volume to store ACME certs (if ACME is enabled)                                                                     | `true`                                            |
 | `acme.persistence.annotations`         | PVC annotations                                                                                                              | `{}`                                              |
 | `acme.persistence.storageClass`        | Type of `StorageClass` to request, will be cluster-specific                                                                  | `nil` (uses alpha storage class annotation)       |

stable/traefik/templates/_helpers.tpl

@@ -82,6 +82,18 @@ Create the block for acme.domains.
 {{- end -}}
 {{- end -}}
 
+{{/*
+Create the block for acme.resolvers.
+*/}}
+{{- define "traefik.acme.dnsResolvers" -}}
+         resolvers = [
+	   {{- range $idx, $ips := .Values.acme.resolvers }}
+	     {{- if $idx }},{{ end }}
+	     {{- $ips | quote }}
+	   {{- end -}}
+         ]
+{{- end -}}
+
 {{/*
 Create custom cipherSuites block
 */}}

stable/traefik/templates/configmap.yaml

@@ -252,6 +252,9 @@ data:
     {{- if eq .Values.acme.challengeType "dns-01" }}
       [acme.dnsChallenge]
       provider = {{ .Values.acme.dnsProvider.name | quote }}
+      {{- if .Values.acme.resolvers }}
+      {{ template "traefik.acme.dnsResolvers" . }}
+      {{- end }}
       {{- if .Values.acme.delayBeforeCheck }}
       delayBeforeCheck = {{ .Values.acme.delayBeforeCheck }}
       {{- end }}

stable/traefik/values.yaml

@@ -191,6 +191,9 @@ acme:
   ## Configure dnsProvider to perform domain verification using dns challenge
   ## Applicable only if using the dns-01 challenge type
   delayBeforeCheck: 0
+  resolvers: []
+    # - 1.1.1.1:53
+    # - 8.8.8.8:53
   dnsProvider:
     name: nil
     auroradns: