<p>I was trying to set up a traefik load balancer as an alternative LB for nginx-ingress. I used the helm chart from <a href="https://github.com/helm/charts/tree/master/stable/traefik" rel="nofollow noreferrer">https://github.com/helm/charts/tree/master/stable/traefik</a> and installed on my GKE cluster with rbac enabled since I use Kubernetes v1.12:</p>

<pre><code>helm install --name traefik-lb --namespace kube-system --set rbac.enabled=true stable/traefik
</code></pre>

<p>My test application's ingress.yaml points to the new ingress class now:</p>

<pre><code>kubernetes.io/ingress.class: "traefik"
</code></pre>

<p>What I've seen in the logs is that Traefik reloads its config all the time. I would also like to know if Traefik definitely needs a TLS cert to "just" route traffic.</p>

Timo Antweiler
<blockquote>
  <p>What I've seen in the logs is that traefik reloads its config all the time.</p>
</blockquote>

<p>It should reload every time you change the Ingress resources associated with it (The Traefik ingress controller). If it reloads all the time without any change to your cluster, there may be an issue with Traefik itself or the way your cluster is set up.</p>

<blockquote>
  <p>I would also like to know if traefik definitely needs a TLS cert to "just" route traffic.</p>
</blockquote>

<p>No, it doesn't. This <a href="https://docs.traefik.io/providers/kubernetes-ingress/#enabling-and-using-the-provider" rel="nofollow noreferrer">basic example</a> from the documentation shows that 
you don't need TLS if you don't want to set it up.</p>
