Example about TLS and ingress.annotations

[vittoriomonaco]

Hello,

I wanted to ask if it would be possible to clarify some details regarding the TLS configuration and the ingress.annotations section.

For detail, I am providing the command successfully executed on my infrastructure.

Environment:

• K3S
• Ingress: Traefik
• cert-manager, for certificate generation
• external-dns, for DNS record generation and configuration on PowerDNS (external DNS to Kubernetes)

helm install kellnr kellnr/kellnr --namespace kellnr-private-registry \
  --set pvc.enabled=true \
  --set pvc.storageClassName=ceph-rbd-sc \
  --set pvc.storage=10Gi \
  --set kellnr.origin.hostname="kellnr.example.com" \
  --set kellnr.origin.port=443 \
  --set kellnr.origin.protocol=https \
  --set kellnr.apiProtocol=https \
  --set certificate.enabled=true \
  --set certificate.issuerRef.name="letsencrypt-production" \
  --set ingress.className=traefik \
  --set ingress.tls.enabled=true \
  --set ingress.tls.certSource=secret \
  --set ingress.annotations."external-dns\.alpha\.kubernetes\.io/hostname"="kellnr.example.com"

TLS:

• It is not clear that it is necessary to use kellnr.origin.port and kellnr.origin.protocol
• kellnr.apiProtocol is not present in values.yaml, creating confusion about its usage
• Should ingress.tls.enabled and ingress.tls.certSource be used?

ingress.annotations: From what is stated in the documentation, I thought it should be treated like the other parameters, but it is correctly interpreted with the escape \ and in the indicated format.

Could you provide some examples on how to use ingress.annotations, even in the case where more than one annotation needs to be used?

Thank you very much for the work done.