infra/roles/k8s-node/templates/traefik-config.yaml

apiVersion: helm.cattle.io/v1
kind: HelmChartConfig
metadata:
  name: traefik
  namespace: kube-system
spec:
  valuesContent: |-
    deployment:
      replicas: 2
    ports:
      web:
        proxyProtocol:
          trustedIPs:
            - 10.5.1.245/32
            - 10.5.1.1/32
            - 10.42.0.0/16   # traffic getting redirected from other nodes
      websecure:
        proxyProtocol:
          trustedIPs:
            - 10.5.1.245/32
            - 10.5.1.1/32
            - 10.42.0.0/16   # traffic getting redirected from other nodes
    additionalArguments:
      - --providers.file.directory=/file-configs
      - --providers.file.watch=true
      - --entrypoints.web.http.redirections.entryPoint.to=:443
      - --entrypoints.web.http.redirections.entryPoint.scheme=https
      - --entrypoints.web.http.redirections.entrypoint.permanent=true
    volumes:
      - name: traefik-additional-configs
        mountPath: /file-configs
        type: configMap
    providers:
      kubernetesCRD:
        allowCrossNamespace: true
    logs:
      access:
        enabled: false