fix: support ACME preferredChain option

Signed-off-by: Kevin Pollet <pollet.kevin@gmail.com> Signed-off-by: kevinpollet <pollet.kevin@gmail.com>
helm · Jan 11, 2022 · 0e0f740 · 0e0f740
1 parent 390ee66
commit 0e0f740
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/stable/traefik/Chart.yaml b/stable/traefik/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: traefik
-version: 1.87.7
-appVersion: 1.7.26
+version: 1.87.8
+appVersion: 1.7.33
 description: DEPRECATED - A Traefik based Kubernetes ingress controller with Let's Encrypt support
 keywords:
 - traefik

diff --git a/stable/traefik/README.md b/stable/traefik/README.md
@@ -162,6 +162,7 @@ The following table lists the configurable parameters of the Traefik chart and t
 | `acme.onHostRule`                      | Whether to generate a certificate for each frontend with Host rule                                                           | `true`                                            |
 | `acme.staging`                         | Whether to get certs from Let's Encrypt's staging environment                                                                | `true`                                            |
 | `acme.caServer`                        | (Advanced) Specify a custom ACME server endpoint. Overrides `acme.staging` behavior if specified.    | `nil` |
+| `acme.preferredChain`                  | Specify the preferred chain to use.                                                                                          | ""                                                |
 | `acme.logging`                         | Display debug log messages from the ACME client library                                                                      | `false`                                           |
 | `acme.domains.enabled`                 | Enable certificate creation by default for specific domain                                                                   | `false`                                           |
 | `acme.domains.domainsList`             | List of domains & (optional) subject names                                                                                   | `[]`                                              |

diff --git a/stable/traefik/templates/configmap.yaml b/stable/traefik/templates/configmap.yaml
@@ -314,6 +314,9 @@ data:
     caServer = "https://acme-staging-v02.api.letsencrypt.org/directory"
       {{- end }}
     {{- end -}}
+    {{- if .Values.acme.preferredChain }}
+    preferredChain = {{ .Values.acme.preferredChain | quote }}
+    {{- end }}
     {{- if .Values.acme.logging }}
     acmeLogging = true
     {{- end }}

diff --git a/stable/traefik/values.yaml b/stable/traefik/values.yaml
@@ -227,6 +227,9 @@ acme:
   ## Specify a custom ACME server endpoint
   ## Optional
   # caServer: https://acme-staging-v02.api.letsencrypt.org/directory
+  ## Specify the preferred chain to use.
+  ## Optional
+  # preferredChain: "ISRG Root X1"
   logging: false
   # Configure a Let's Encrypt certificate to be managed by default.
   # This is the only way to request wildcard certificates (works only with dns challenge).