日常更新

ansible/files/03-03/traefik-dashboard-acme.yaml

@@ -9,13 +9,17 @@ metadata:
   namespace: kube-system
 spec:
   valuesContent: |-
+    # chart 39.x：expose 须为表，布尔会与默认 values 合并冲突并导致 helm upgrade 模板失败
     ports:
       web:
-        expose: true
+        expose:
+          default: true
       websecure:
-        expose: true
+        expose:
+          default: true
       traefik:
-        expose: true
+        expose:
+          default: true
 
     additionalArguments:
       # Dashboard
@@ -48,13 +52,20 @@ spec:
     nodeSelector:
       kubernetes.io/hostname: ylc61
 
-    # persistence：将 /data 持久化（local-path PVC），保证 acme.json 落盘
+    # ping 绑定 websecure 时，chart 默认仍对 traefik(8080) 做 HTTP /ping → 404；与 chart 39 对齐探针
+    deployment:
+      healthchecksPort: 8443
+      healthchecksScheme: HTTPS
+
+    # persistence：将 /data 持久化，保证 acme.json 落盘
+    # 显式 local-path：避免集群默认 StorageClass 为 longhorn 等未就绪时 Pod 长期 Pending
     persistence:
       enabled: true
       name: data
       accessMode: ReadWriteOnce
       size: 128Mi
       path: /data
+      storageClass: local-path
 
 ---
 apiVersion: traefik.io/v1alpha1