Sidecar mode

How to install and configure the Traefik Hub agent in Sidecar mode.

Introduction¶

Make sure to check the overview to understand the differences between Ingress and Sidecar mode.

This page explains how to install and configure the Traefik Hub agent in Sidecar mode.

The Helm chart will deploy the following components into your Kubernetes cluster:

Before you begin the installation process, it is recommended that you have a basic understanding of Kubernetes.

You should have access to a working Kubernetes cluster, either on a cloud provider or on your own infrastructure.

Please make sure that you have the following:

Using the Traefik Hub UI is the preferred way (and most effortless) to install a Traefik Hub agent.

The UI will guide you through the installation process step-by-step.

Login to Traefik Hub and select Create my first Traefik Hub agent.

In the next step, configure the installation process by choosing your Ingress Controller (Emissary or NGINX).

Follow the steps in the UI and copy the commands shown in the code blocks one by one into your CLI and run them.

See the following example for NGINX:

If you initialize the Traefik Hub agent on a new cluster, we highly recommended to use security hardening!

To harden your installation, select the security hardening option during the installation.

By using security hardening, the container of the Ingress Controller and the Traefik Hub agent will run in non-root mode.

Further, permissions for Kubernetes ACLs and network settings will be adjusted and set to a minimum.

Why is that not the default option?

Security hardening involves changing permissions and ports.

This could break or interfere with your existing Kubernetes configuration.

Once you're done, select Configuration Done.