It creates secrets in your namespaces that can be referenced as TLS secrets in your ingress objects. When using Cert-Manager to manage certificates, LetsEncrypt HA can be achieved by using a Certificate Controller such as Cert-Manager. We recommend using Traefik Enterprise which includes distributed Let's Encrypt as a supported feature.

If you need Let's Encrypt with high availability in a Kubernetes environment, Previous versions of Traefik used a KV store to attempt to achieve this,īut due to sub-optimal performance that feature was dropped in 2.0. Unfortunately, it is not possible to run multiple instances of Traefik 2.0 with Let's Encrypt enabled,īecause there is no way to ensure that the correct instance of Traefik receives the challenge request, and subsequent responses. However, this could be a single point of failure. When using a single instance of Traefik Proxy with Let's Encrypt, you should encounter no issues. Meaning that it only derives its configuration from the environment it runs in,įor this reason, users can run multiple instances of Traefik at the same time to achieve HA,Īs is a common pattern in the kubernetes ecosystem. ServicePort: 80 LetsEncrypt Support with the Ingress Provider ¶īy design, Traefik is a stateless application, LetsEncrypt Support with the Ingress Provider

Kubernetes annotations