Samuel

Rancher's helm-untt plugin just does not offer with that capability. Remove and re-install that plugin, as I did there: https://github.com/traefik/traefik-helm-chart/pull/466/files#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52

@abatilo : revert tests, merge master in, bump chart version, re-test. I'm a bit overwhelmed right now ... I'll try to give it a look tomorrow.

It would be nice to have some tests, maybe even comments. It isn't obvious to me what that code does, just looking at the diff. Though I kinda get it,...

Hi, Shouldn't your `service.beta.kubernetes.io/aws-load-balancer-ssl-ports` annotation point to `websecure` instead of `https` -- assuming default `ports` value? Checking https://github.com/traefik/traefik-helm-chart/issues/172#issuecomment-653868930 , sounds like when the requested port name is not found, then...

So... I've tried to address these in the PR above -- #337 . I've been digging on the privileges escalations: I'm still getting permission denied, binding on privileged ports, even...

point 3 states: having the traefik container run without any specific privileges other than the API and its PSP, allowing for hostNetwork Your sample securityContext doest start a privileged container,...

Faced with the same issue here ... In retrospective, I think this has to do with the following cap being set on the nginx binary, in the nginx-ingress-controller image: ```...

Using UDP doesn't really make sense for health check, though we should be able to configure the TCP health check to query for a port confirming your Node is up...

Indeed. Also, the label matched `app` would not be set either (should be `app.kubernetes.io/name`). Though your error would suggest we can not re-use variables generated in `templates/_helpers.tpl`, setting `values`. One...

Maybe, though the tolopogyKey for the initial rule may not always be `kubernetes.io/hostname` -- in some cloud-hosted cluster, you would probably rely on something like a zone -- maybe add...