diff --git a/k8s/traefik-config.yaml b/k8s/traefik-config.yaml
new file mode 100644
index 0000000..8e5efc2
--- /dev/null
+++ b/k8s/traefik-config.yaml
@@ -0,0 +1,28 @@
+---
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  namespace: traefik
+  name: traefik-config
+data:
+  traefik.yaml: |
+    entrypoints:
+      traefik:
+        address: ":9000/tcp"
+      metrics:
+        address: ":9100/tcp"
+      web:
+        address: ":8000/tcp"
+      websecure:
+        address: ":8443/tcp"
+        http:
+          tls: true
+    api:
+      dashboard: true
+    ping: true
+    metrics:
+      prometheus:
+        entrypoint: metrics
+    providers:
+      kubernetescrd: true
+      kubernetesingress: true
diff --git a/k8s/traefik.yaml b/k8s/traefik.yaml
index d7bee5d..5c654a8 100644
--- a/k8s/traefik.yaml
+++ b/k8s/traefik.yaml
@@ -72,25 +72,16 @@ spec:
             runAsNonRoot: true
             runAsUser: 65532
           volumeMounts:
+            - name: config
+              mountPath: /etc/traefik
             - name: data
               mountPath: /data
             - name: tmp
               mountPath: /tmp
-          args:
-            - "--global.checknewversion"
-            - "--global.sendanonymoususage"
-            - "--entrypoints.metrics.address=:9100/tcp"
-            - "--entrypoints.traefik.address=:9000/tcp"
-            - "--entrypoints.web.address=:8000/tcp"
-            - "--entrypoints.websecure.address=:8443/tcp"
-            - "--api.dashboard=true"
-            - "--ping=true"
-            - "--metrics.prometheus=true"
-            - "--metrics.prometheus.entrypoint=metrics"
-            - "--providers.kubernetescrd"
-            - "--providers.kubernetesingress"
-            - "--entrypoints.websecure.http.tls=true"
       volumes:
+        - name: config
+          configMap:
+            name: traefik-config
         - name: data
           emptyDir: {}
         - name: tmp