Traefik Ingress Operator for Kubernetes

  • By Canonical Observability
Channel Revision Published Runs on
latest/stable 166 12 Dec 2023
Ubuntu 20.04
latest/candidate 166 12 Dec 2023
Ubuntu 20.04
latest/beta 169 16 Feb 2024
Ubuntu 20.04
latest/edge 169 13 Feb 2024
Ubuntu 20.04
1.0/stable 164 16 Feb 2024
Ubuntu 20.04
1.0/candidate 164 22 Nov 2023
Ubuntu 20.04
1.0/beta 164 22 Nov 2023
Ubuntu 20.04
1.0/edge 164 22 Nov 2023
Ubuntu 20.04
juju deploy traefik-k8s
Show information


Key Value
Summary Deploy the COS Lite observability stack on MicroK8s.
Categories deploy-applications
Difficulty 2
Author Leon Mintz



The COS Lite bundle is a Juju-based observability stack, running on Kubernetes. The bundle consists of Prometheus, Loki, Alertmanager and Grafana.

This tutorial assumes you have a Juju controller bootstrapped on a MicroK8s cloud that is ready to use. A typical setup using snaps can be found in the Juju docs. Follow the instructions there to install Juju and MicroK8s.

Let’s go and deploy that bundle!

Configure MicroK8s

For the COS Lite bundle deployment to go smoothly, make sure the following MicroK8s addons are enabled: dns, hostpath-storage and metallb.

You can check this with microk8s status, and if any are missing, enable them with

microk8s enable dns 
microk8s enable hostpath-storage

The bundle comes with Traefik to provide ingress, for which the metallb addon should be enabled:

IPADDR=$(ip -4 -j route get | jq -r '.[] | .prefsrc')
microk8s enable metallb:$IPADDR-$IPADDR

To wait for all the addons to be rolled out,

microk8s kubectl rollout status deployments/hostpath-provisioner -n kube-system -w
microk8s kubectl rollout status deployments/coredns -n kube-system -w
microk8s kubectl rollout status daemonset.apps/speaker -n metallb-system -w

If you have an HTTP proxy configured, you will need to give this information to MicroK8s. See the proxy docs for details.

By default, MicroK8s will use and as DNS servers, which can be adjusted. See the dns docs for details.

Deploy the COS Lite bundle

It is usually a good idea to create a dedicated model for the COS Lite bundle. So let’s do just that and call the new model cos:

juju add-model cos
juju switch cos

Next, deploy the bundle with:

juju deploy cos-lite --trust

Now you can sit back and watch the deployment take place:

watch --color juju status --color --relations

The status of your deployment should eventually be very similar to the following:

> juju status --relations
Model  Controller  Cloud/Region        Version  SLA          Timestamp
cos    charm-dev   microk8s/localhost  2.9.42   unsupported  15:43:36-04:00

App           Version  Status  Scale  Charm             Channel  Rev  Address         Exposed  Message
alertmanager  0.25.0   active      1  alertmanager-k8s  edge      67   no       
catalogue              active      1  catalogue-k8s     edge      15  no       
grafana       9.2.1    active      1  grafana-k8s       edge      77  no       
loki          2.7.4    active      1  loki-k8s          edge      82  no       
prometheus    2.42.0   active      1  prometheus-k8s    edge     122   no       
traefik       2.9.6    active      1  traefik-k8s       edge     125      no       

Unit             Workload  Agent  Address     Ports  Message
alertmanager/0*  active    idle         
catalogue/0*     active    idle         
grafana/0*       active    idle         
loki/0*          active    idle         
prometheus/0*    active    idle         
traefik/0*       active    idle         

Relation provider                   Requirer                     Interface              Type     Message
alertmanager:alerting               loki:alertmanager            alertmanager_dispatch  regular  
alertmanager:alerting               prometheus:alertmanager      alertmanager_dispatch  regular  
alertmanager:grafana-dashboard      grafana:grafana-dashboard    grafana_dashboard      regular  
alertmanager:grafana-source         grafana:grafana-source       grafana_datasource     regular  
alertmanager:replicas               alertmanager:replicas        alertmanager_replica   peer     
alertmanager:self-metrics-endpoint  prometheus:metrics-endpoint  prometheus_scrape      regular  
catalogue:catalogue                 alertmanager:catalogue       catalogue              regular  
catalogue:catalogue                 grafana:catalogue            catalogue              regular  
catalogue:catalogue                 prometheus:catalogue         catalogue              regular  
grafana:grafana                     grafana:grafana              grafana_peers          peer     
grafana:metrics-endpoint            prometheus:metrics-endpoint  prometheus_scrape      regular  
loki:grafana-dashboard              grafana:grafana-dashboard    grafana_dashboard      regular  
loki:grafana-source                 grafana:grafana-source       grafana_datasource     regular  
loki:metrics-endpoint               prometheus:metrics-endpoint  prometheus_scrape      regular  
prometheus:grafana-dashboard        grafana:grafana-dashboard    grafana_dashboard      regular  
prometheus:grafana-source           grafana:grafana-source       grafana_datasource     regular  
prometheus:prometheus-peers         prometheus:prometheus-peers  prometheus_peers       peer     
traefik:ingress                     alertmanager:ingress         ingress                regular  
traefik:ingress                     catalogue:ingress            ingress                regular  
traefik:ingress-per-unit            loki:ingress                 ingress_per_unit       regular  
traefik:ingress-per-unit            prometheus:ingress           ingress_per_unit       regular  
traefik:metrics-endpoint            prometheus:metrics-endpoint  prometheus_scrape      regular  
traefik:traefik-route               grafana:ingress              traefik_route          regular  

Now COS Lite is good to go: you can relate software with it to begin the monitoring!

Alternatively, you may want to deploy the bundle with one or more of our readily available overlays, which is what we’ll cover next.

Deploy the COS Lite bundle with overlays

An overlay is a set of model-specific modifications that avoid repetitive overhead in setting up bundles like COS Lite.

Specifically, we offer the following overlays:

You can apply the offers overlay do an existing COS Lite bundle by executing the juju deploy command. The storage-small overlay, however, is applicable only on the first deployment. So, if you were following the previous steps you would first need to switch to a new Juju model or remove all applications from the current one.

To use any of the overlays above, you need to include an --overlay argument per overlay (applied in order):

curl -L -O
curl -L -O

juju deploy cos-lite \
  --trust \
  --overlay ./offers-overlay.yaml \
  --overlay ./storage-small-overlay.yaml

Browse dashboards

When all the charms are deployed you can head over to browse their built-in web-UIs. You can find out their addresses from the show-proxied-endpoints traefik action. For example:

juju run traefik/0 show-proxied-endpoints --format=yaml \
  | yq '."traefik/0".results."proxied-endpoints"' \
  | jq

…should return output similar to:

  "prometheus/0": {
    "url": ""
  "loki/0": {
    "url": ""
  "catalogue": {
    "url": ""
  "alertmanager": {
    "url": ""

In the output above,

  • is traefik’s IP address.
  • Applications that are ingresses “per app”, such as alertmanager, are accessible via the model-app path (i.e.
  • Applications that are ingresses “per unit”, such as loki, are accessible via the model-app-unit path (i.e.

Note that Grafana does not appear in the list. Currently, to obtain Grafana’s proxied endpoint you would need to look at catalogue’s relation data directly - try running:

juju show-unit catalogue/0 | grep url

…which should return a list of the endpoints like this:


With ingress in place, you can still access the workloads via pod IPs, but you will need to include the original port, as well as the ingress path. For example:


The default password for Grafana is automatically generated for every installation. To access Grafana’s web interface, use the username admin, and the password obtained from the get-admin-password action, e.g:

juju run grafana/leader get-admin-password --model cos


Next steps

If you need support, the charmhub community is the best place to get all your questions answered and get in touch with the community.

Further reading

Help improve this document in the forum (guidelines). Last updated 2 months ago.