Samuel

I doubt mounting your file in here would have any effect. Have you tried patching your existing deployment, leaving Helm aside? I think you need to run some `update-ca-certifcates`. I...

You may have noticed /etc/ssl/certs holds links. Running update-ca-certificates, you re-generate that database. No matter it's emptyDir, the initContainer is meant to build a fresh copy, that would include your...

I'm not sure what's wrong. I've justed tested and confirmed, the following works: ``` volumes: - mountPath: /usr/local/share/ca-certificates name: root-ca type: configMap - mountPath: /etc/ssl/certs name: temp type: emptyDir deployment:...

Pretty weird, using the alpine image for your initContainer shouldn't be an issue -- my using the traefik image is mostly to avoid pulling 2 images during Pod startup. I'm...

Right, I did notice this a while ago, and package that fix into a PR that was meant for something else ... https://github.com/traefik/traefik-helm-chart/pull/337 You're looking for this: https://github.com/traefik/traefik-helm-chart/pull/337/files#diff-f4430485e5002c71e33daa985c34e0fe4e4738a271c697ba0b1aaaba1718e041 And that...

IngressClass are cluster scoped objects. When issuing a command (get/list/watch/create/...), you do need those permissions at the cluster level. This is not a bug. Same goes for all cluster scoped...

> what's the purpose of rbac.namespaced=true? Limits the scope of Ingresses that a given Traefik controller may use/write. Limits the scope of Services that a given controller may expose/communicate with....

Sure, I'll look into it.

Looking into this, I'm confused I can't get Capabilities based checks working as expected. I've been hitting with errors such as `can't evaluate field Version in type *version.Info`. Eventually, I...

I didn't have much time to look at this. The unittest plugin from quintush may be the way to go, although I've had to "fix" tests to get them working....