How do I deploy Traefik ingress controller with scheduling on Kubernetes?

In this guide, we will deploy the Traefik ingress controller on a Kubernetes cluster with specific scheduling constraints using Pulumi. We will define a Traefik deployment, service, and an ingress resource. Additionally, we will configure node selectors and tolerations to control the scheduling of the Traefik pods.

import * as pulumi from "@pulumi/pulumi";
import * as k8s from "@pulumi/kubernetes";

// Define the namespace for Traefik
const traefikNamespace = new k8s.core.v1.Namespace("traefik", {
    metadata: {
        name: "traefik",
    },
});

// Define the Traefik deployment
const traefikDeployment = new k8s.apps.v1.Deployment("traefik", {
    metadata: {
        namespace: traefikNamespace.metadata.name,
        labels: { app: "traefik" },
    },
    spec: {
        replicas: 1,
        selector: {
            matchLabels: { app: "traefik" },
        },
        template: {
            metadata: {
                labels: { app: "traefik" },
            },
            spec: {
                containers: [
                    {
                        name: "traefik",
                        image: "traefik:v2.5",
                        ports: [
                            { name: "web", containerPort: 80 },
                            { name: "websecure", containerPort: 443 },
                        ],
                    },
                ],
                // Node selector to specify nodes for scheduling
                nodeSelector: {
                    "kubernetes.io/os": "linux",
                },
                // Tolerations to allow scheduling on tainted nodes
                tolerations: [
                    {
                        key: "node-role.kubernetes.io/master",
                        operator: "Exists",
                        effect: "NoSchedule",
                    },
                ],
            },
        },
    },
});

// Define the Traefik service
const traefikService = new k8s.core.v1.Service("traefik", {
    metadata: {
        namespace: traefikNamespace.metadata.name,
        labels: { app: "traefik" },
    },
    spec: {
        selector: { app: "traefik" },
        ports: [
            { name: "web", port: 80, targetPort: "web" },
            { name: "websecure", port: 443, targetPort: "websecure" },
        ],
        type: "LoadBalancer",
    },
});

// Define an Ingress resource to route traffic to the Traefik service
const traefikIngress = new k8s.networking.v1.Ingress("traefik-ingress", {
    metadata: {
        namespace: traefikNamespace.metadata.name,
        annotations: {
            "kubernetes.io/ingress.class": "traefik",
        },
    },
    spec: {
        rules: [
            {
                host: "example.com",
                http: {
                    paths: [
                        {
                            path: "/",
                            pathType: "Prefix",
                            backend: {
                                service: {
                                    name: traefikService.metadata.name,
                                    port: { number: 80 },
                                },
                            },
                        },
                    ],
                },
            },
        ],
    },
});

// Export the Traefik service's external IP
export const traefikServiceIp = traefikService.status.loadBalancer.ingress[0].ip;

Key Points

Namespace: We created a namespace for Traefik to isolate its resources.
Deployment: We defined a Traefik deployment with node selectors and tolerations to control pod scheduling.
Service: We set up a service to expose Traefik with a LoadBalancer type.
Ingress: We configured an ingress resource to route traffic to the Traefik service.

Summary

We deployed the Traefik ingress controller on a Kubernetes cluster using Pulumi. We included specific scheduling constraints using node selectors and tolerations, set up a service to expose Traefik, and configured an ingress resource to route traffic. This setup ensures that Traefik is properly scheduled and accessible.

Deploy this code

Want to deploy this code? Sign up for a free Pulumi account to deploy in a few clicks.

New to Pulumi?

Want to deploy this code? Sign up with Pulumi to deploy in a few clicks.