By default, K3s ships with Traefik as the Ingress controller. You can configure it to automatically generate TLS certificates using Let’s Encrypt via the ACME protocol. This guide assumes: You're running K3s with Traefik enabled You have a public domain name (e.g., minio.example.com) Ports 80 and 443 are open and forwarded to your K3s nodes DNS for your domain points to your K3s cluster external IP ✅ Step 1: Check That Traefik Is Installed Run the following to verify Traefik is deployed: kubectl get pods -n kube-system -l app.kubernetes.io/name=traefik If you see a Traefik pod running, you're good. If not, reinstall K3s with the --disable traefik flag removed. ✍️ Step 2: Create a Traefik Configuration Override

Mar 30, 2025 - 16:53
 0

By default, K3s ships with Traefik as the Ingress controller. You can configure it to automatically generate TLS certificates using Let’s Encrypt via the ACME protocol.

This guide assumes:

  • You're running K3s with Traefik enabled
  • You have a public domain name (e.g., minio.example.com)
  • Ports 80 and 443 are open and forwarded to your K3s nodes
  • DNS for your domain points to your K3s cluster external IP

✅ Step 1: Check That Traefik Is Installed

Run the following to verify Traefik is deployed:

kubectl get pods -n kube-system -l app.kubernetes.io/name=traefik

If you see a Traefik pod running, you're good.

If not, reinstall K3s with the --disable traefik flag removed.

✍️ Step 2: Create a Traefik Configuration Override