traefik-ingress.yml

kind: DaemonSet
metadata:
  name: traefik-ingress-controller
  labels:
    k8s-app: traefik-ingress-lb
spec:
  template:
    metadata:
      labels:
        k8s-app: traefik-ingress-lb
        name: traefik-ingress-lb
    spec:
      terminationGracePeriodSeconds: 60
      hostNetwork: true
      nodeSelector:
        role: edge
      volumes:
        - name: config-volume
          configMap:
            name: traefik-ingress-controller-config
      containers:
        - image: traefik
          name: traefik-ingress-lb
          imagePullPolicy: Always
          ports:
            - containerPort: 80
              hostPort: 80
            - containerPort: 443
              hostPort: 443
            - containerPort: 8080
          volumeMounts:
            - name: config-volume
              mountPath: /etc/traefik
          args:
            - -c
            - /etc/traefik/traefik.toml
            - --web
            - --logLevel=DEBUG
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: traefik-ingress-controller-config
data:
  traefik.toml: |-
    port = ":80"
    graceTimeOut = 10
    logLevel = "DEBUG"

    [web]
    address = ":8080"
    CertFile = "/etc/pki/mantl/cert"
    KeyFile = "/etc/pki/mantl/key"

    [marathon]
    endpoint = "http://marathon.service.consul:18080"
    domain = "your-wildcard-domain.com"
    watch = true
    networkInterface = "eth0"
    ExposedByDefault = true

    [kubernetes]