1、修改helm的values.yaml文件
# values.yaml
...
hostNetwork: true # 使用宿主机的网络
ports:traefik:port: 8080............web:port: 80 # 端口由 8000 改为 80....websecure:port: 443 # 端口由 8443 改为 443......
securityContext:allowPrivilegeEscalation: falsecapabilities:drop: [ALL]add: [NET_BIND_SERVICE] # 添加绑定端口readOnlyRootFilesystem: truerunAsGroup: 0 # 使用root权限runAsNonRoot: false runAsUser: 0...# 尝试更新helm
helm upgrade -n kube-system traefik -f values.yaml .
[root@master-11 traefik]# kubectl get pods -n kube-system
NAME READY STATUS RESTARTS AGE
traefik-76d8b868d4-rhrfq 1/1 Running 0 11m
[root@master-11 traefik]# kubectl get deployments.apps -n kube-system -oyaml | grep "web"- --entryPoints.web.address=:80/tcp- --entryPoints.websecure.address=:443/tcp- --entryPoints.websecure.http.tls=truename: webname: websecure
# 这里可以看出来已经修改成功了
2、错误示例
# 不修改values.yaml直接修改deployment资源（没权限）
[root@master-11 traefik]# kubectl logs -n kube-system traefik-7b45ddb7b8-ndddt
2025-08-24T14:05:06Z INF Traefik version 3.3.4 built on 2025-02-25T10:11:01Z version=3.3.4
2025-08-24T14:05:06Z INF Stats collection is enabled.
2025-08-24T14:05:06Z INF Many thanks for contributing to Traefik's improvement by allowing us to receive anonymous information from your configuration.
2025-08-24T14:05:06Z INF Help us improve Traefik by leaving this feature on :)
2025-08-24T14:05:06Z INF More details on: https://doc.traefik.io/traefik/contributing/data-collection/
2025-08-24T14:05:06Z ERR Command error error="command traefik error: error while building entryPoint web: error preparing server: error opening listener: listen tcp :80: bind: permission denied"若是监听端口里没有443端口（前提是你得有服务），hostNetwork在deployment中看不到则手动进行添加
[root@master-11 registry]# ss -tulnp | grep 443
tcp LISTEN 0 4096 *:6443 *:* users:(("kube-apiserver",pid=1772,fd=3))
[root@master-11 registry]# kubectl edit deployments.apps -n traefik traefik
在你的spec下一级字段添加dnsPolicy: ClusterFirst与hostNetwork: true，然后稍等一段时间确认pod已经起来了
[root@master-11 registry]# ss -tulnp | grep 443
tcp LISTEN 0 4096 *:6443 *:* users:(("kube-apiserver",pid=1772,fd=3))
tcp LISTEN 0 4096 *:443 *:* users:(("traefik",pid=10357,fd=6))
