https://rancher.com/ logo
#general
Title
# general
n

numerous-midnight-66907

08/01/2022, 11:34 AM
Hi All, I want to know one thing regarding Traefik ingress controller. If I want to disable the SSL certificate verification. What is the correct way to do that ? We are using Traefik 2.6.2. I have used this custom traefik.yaml :
Copy code
---

apiVersion: <http://helm.cattle.io/v1|helm.cattle.io/v1>
kind: HelmChart
metadata:
  name: traefik-crd
  namespace: kube-system
spec:
  chart: https://%{KUBERNETES_API}%/static/charts/traefik-crd-10.19.300.tgz
---
apiVersion: <http://helm.cattle.io/v1|helm.cattle.io/v1>
kind: HelmChart
metadata:
  name: traefik
  namespace: kube-system
spec:
  chart: https://%{KUBERNETES_API}%/static/charts/traefik-10.19.300.tgz
  set:
    global.systemDefaultRegistry: ""
    "ssl.insecureSkipVerify": "true"                         # Our changes
    "serversTransport.insecureSkipVerify": "true"  # Our changes
  valuesContent: |-
    ssl.insecureSkipVerify: "true"   # Our changes
    globalArguments:
    rbac:
      enabled: true
    ports:
      websecure:
        tls:
          enabled: true
    podAnnotations:
      <http://prometheus.io/port|prometheus.io/port>: "8082"
      <http://prometheus.io/scrape|prometheus.io/scrape>: "true"
    providers:
      kubernetesIngress:
        publishedService:
          enabled: true
      http:
        tls:
          insecureSkipVerify: false
    priorityClassName: "system-cluster-critical"
    image:
      name: "rancher/mirrored-library-traefik"
      tag: "2.6.2"
    tolerations:
    - key: "CriticalAddonsOnly"
      operator: "Exists"
    - key: "<http://node-role.kubernetes.io/control-plane|node-role.kubernetes.io/control-plane>"
      operator: "Exists"
      effect: "NoSchedule"
    - key: "<http://node-role.kubernetes.io/master|node-role.kubernetes.io/master>"
      operator: "Exists"
      effect: "NoSchedule"
    service:
      ipFamilyPolicy: "PreferDualStack"
136 Views