feat(helm)!: Update Chart traefik (36.3.0 → 39.0.0) #1175
+1
−1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pipelines-github-app
bot
added
app/traefik
Contributor
Author
--- main/traefik_gitops_manifests_traefik_k0s_manifest_main.yaml 2026-02-12 04:55:05.885495733 +0000
+++ pr/traefik_gitops_manifests_traefik_k0s_manifest_pr.yaml 2026-02-12 04:55:05.227496599 +0000
@@ -1,442 +0,0 @@
----
-# Source: traefik/charts/traefik/templates/poddisruptionbudget.yaml
-apiVersion: policy/v1beta1
-kind: PodDisruptionBudget
-metadata:
- name: traefik
- namespace: default
- labels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- helm.sh/chart: traefik-36.3.0
- app.kubernetes.io/managed-by: Helm
-spec:
- selector:
- matchLabels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- maxUnavailable: 1
----
-# Source: traefik/charts/traefik/templates/rbac/serviceaccount.yaml
-kind: ServiceAccount
-apiVersion: v1
-metadata:
- name: traefik
- namespace: default
- labels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- helm.sh/chart: traefik-36.3.0
- app.kubernetes.io/managed-by: Helm
- annotations:
-automountServiceAccountToken: false
----
-# Source: traefik/charts/traefik/templates/rbac/clusterrole.yaml
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: traefik-default
- labels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- helm.sh/chart: traefik-36.3.0
- app.kubernetes.io/managed-by: Helm
-rules:
- - apiGroups:
- - ""
- resources:
- - configmaps
- - nodes
- - services
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - discovery.k8s.io
- resources:
- - endpointslices
- verbs:
- - list
- - watch
- - apiGroups:
- - ""
- resources:
- - secrets
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - extensions
- - networking.k8s.io
- resources:
- - ingressclasses
- - ingresses
- verbs:
- - get
- - list
- - watch
- - apiGroups:
- - extensions
- - networking.k8s.io
- resources:
- - ingresses/status
- verbs:
- - update
- - apiGroups:
- - traefik.io
- resources:
- - ingressroutes
- - ingressroutetcps
- - ingressrouteudps
- - middlewares
- - middlewaretcps
- - serverstransports
- - serverstransporttcps
- - tlsoptions
- - tlsstores
- - traefikservices
- verbs:
- - get
- - list
- - watch
----
-# Source: traefik/charts/traefik/templates/rbac/clusterrolebinding.yaml
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
- name: traefik-default
- labels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- helm.sh/chart: traefik-36.3.0
- app.kubernetes.io/managed-by: Helm
-roleRef:
- apiGroup: rbac.authorization.k8s.io
- kind: ClusterRole
- name: traefik-default
-subjects:
- - kind: ServiceAccount
- name: traefik
- namespace: default
----
-# Source: traefik/charts/traefik/templates/service.yaml
-apiVersion: v1
-kind: Service
-metadata:
- name: traefik
- namespace: default
- labels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- helm.sh/chart: traefik-36.3.0
- app.kubernetes.io/managed-by: Helm
- annotations:
-spec:
- type: LoadBalancer
- selector:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- ipFamilyPolicy: PreferDualStack
- ports:
- - port: 80
- name: web
- targetPort: web
- protocol: TCP
- - port: 443
- name: websecure
- targetPort: websecure
- protocol: TCP
----
-# Source: traefik/charts/traefik/templates/deployment.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- name: traefik
- namespace: default
- labels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- helm.sh/chart: traefik-36.3.0
- app.kubernetes.io/managed-by: Helm
- annotations:
-spec:
- replicas: 1
- selector:
- matchLabels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- strategy:
- type: RollingUpdate
- rollingUpdate:
- maxUnavailable: 0
- maxSurge: 1
- minReadySeconds: 0
- template:
- metadata:
- annotations:
- prometheus.io/scrape: "true"
- prometheus.io/path: "/metrics"
- prometheus.io/port: "9100"
- labels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- helm.sh/chart: traefik-36.3.0
- app.kubernetes.io/managed-by: Helm
- spec:
- serviceAccountName: traefik
- automountServiceAccountToken: true
- terminationGracePeriodSeconds: 60
- hostNetwork: false
- containers:
- - image: docker.io/traefik:v3.6.8
- imagePullPolicy: IfNotPresent
- name: traefik
- resources:
- readinessProbe:
- httpGet:
- path: /ping
- port: 8080
- scheme: HTTP
- failureThreshold: 1
- initialDelaySeconds: 2
- periodSeconds: 10
- successThreshold: 1
- timeoutSeconds: 2
- livenessProbe:
- httpGet:
- path: /ping
- port: 8080
- scheme: HTTP
- failureThreshold: 3
- initialDelaySeconds: 2
- periodSeconds: 10
- successThreshold: 1
- timeoutSeconds: 2
- lifecycle:
- ports:
- - name: metrics
- containerPort: 9100
- protocol: TCP
- - name: traefik
- containerPort: 8080
- protocol: TCP
- - name: web
- containerPort: 8000
- protocol: TCP
- - name: websecure
- containerPort: 8443
- protocol: TCP
- securityContext:
- allowPrivilegeEscalation: false
- capabilities:
- drop:
- - ALL
- readOnlyRootFilesystem: true
- volumeMounts:
- - name: data
- mountPath: /data
- - name: tmp
- mountPath: /tmp
- args:
- - "--global.checkNewVersion"
- - "--entryPoints.metrics.address=:9100/tcp"
- - "--entryPoints.traefik.address=:8080/tcp"
- - "--entryPoints.web.address=:8000/tcp"
- - "--entryPoints.websecure.address=:8443/tcp"
- - "--api.dashboard=true"
- - "--ping=true"
- - "--metrics.prometheus=true"
- - "--metrics.prometheus.entrypoint=metrics"
- - "--providers.kubernetescrd"
- - "--providers.kubernetescrd.allowCrossNamespace=true"
- - "--providers.kubernetescrd.allowExternalNameServices=true"
- - "--providers.kubernetescrd.allowEmptyServices=true"
- - "--providers.kubernetesingress"
- - "--providers.kubernetesingress.allowExternalNameServices=true"
- - "--providers.kubernetesingress.allowEmptyServices=true"
- - "--providers.kubernetesingress.ingressendpoint.publishedservice=default/traefik"
- - "--entryPoints.web.http.redirections.entryPoint.to=:443"
- - "--entryPoints.web.http.redirections.entryPoint.scheme=https"
- - "--entryPoints.websecure.http.tls=true"
- - "--log.level=TRACE"
-
- env:
- - name: POD_NAME
- valueFrom:
- fieldRef:
- fieldPath: metadata.name
- - name: POD_NAMESPACE
- valueFrom:
- fieldRef:
- fieldPath: metadata.namespace
- volumes:
- - name: data
- emptyDir: {}
- - name: tmp
- emptyDir: {}
- tolerations:
- - key: CriticalAddonsOnly
- operator: Exists
- - effect: NoSchedule
- key: node-role.kubernetes.io/control-plane
- operator: Exists
- - effect: NoSchedule
- key: node-role.kubernetes.io/master
- operator: Exists
- priorityClassName: system-cluster-critical
- securityContext:
- runAsGroup: 65532
- runAsNonRoot: true
- runAsUser: 65532
----
-# Source: traefik/charts/traefik/templates/ingressclass.yaml
-apiVersion: networking.k8s.io/v1
-kind: IngressClass
-metadata:
- annotations:
- ingressclass.kubernetes.io/is-default-class: "true"
- labels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- helm.sh/chart: traefik-36.3.0
- app.kubernetes.io/managed-by: Helm
- name: traefik
-spec:
- controller: traefik.io/ingress-controller
----
-# Source: traefik/templates/extsecret-wildcard-cert.yaml
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
- name: fredcorp-wildcard
-spec:
- refreshInterval: 1h
- secretStoreRef:
- name: admin
- kind: ClusterSecretStore
- target:
- name: fredcorp-wildcard
- creationPolicy: Owner
- template:
- type: kubernetes.io/tls
- data:
- tls.crt: '{{ .p12 | pkcs12cert }}'
- tls.key: '{{ .p12 | pkcs12key }}'
- data:
- - secretKey: p12
- remoteRef:
- conversionStrategy: Default
- decodingStrategy: Base64
- metadataPolicy: None
- key: wildcard/fredcorp
- property: p12
----
-# Source: traefik/templates/extsecret-wildcard-cert.yaml
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
- name: k0s-fullstack-wildcard
-spec:
- refreshInterval: 1h
- secretStoreRef:
- name: admin
- kind: ClusterSecretStore
- target:
- name: k0s-fullstack-wildcard
- creationPolicy: Owner
- template:
- type: kubernetes.io/tls
- data:
- tls.crt: '{{ .p12 | pkcs12cert }}'
- tls.key: '{{ .p12 | pkcs12key }}'
- data:
- - secretKey: p12
- remoteRef:
- conversionStrategy: Default
- decodingStrategy: Base64
- metadataPolicy: None
- key: wildcard/k0s-fullstack
- property: p12
----
-# Source: traefik/templates/ingressRoute-dashboard.yaml
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
- name: traefik-k0s-dashboard
-spec:
- entryPoints:
- - web
- - websecure
- routes:
- - kind: Rule
- match: Host(`traefik.k0s-fullstack.fredcorp.com`)
- middlewares:
- - name: authentik
- namespace: traefik
- priority: 10
- services:
- - kind: TraefikService
- name: api@internal
- namespace: traefik
- - kind: Rule
- match: Host(`traefik.k0s-fullstack.fredcorp.com`) && PathPrefix(`/outpost.goauthentik.io/`)
- priority: 15
- services:
- - kind: Service
- name: ak-outpost-authentik-embedded-outpost
- namespace: authentik
- port: 9000
----
-# Source: traefik/templates/auth-middleware.yaml
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
- name: authentik
-spec:
- forwardAuth:
- # This address should point to the cluster endpoint provided by the kubernetes service, not the Ingress.
- address: http://ak-outpost-authentik-embedded-outpost.authentik:9000/outpost.goauthentik.io/auth/traefik
- trustForwardHeader: true
- authResponseHeaders:
- - X-authentik-username
- - X-authentik-groups
- - X-authentik-entitlements
- - X-authentik-email
- - X-authentik-name
- - X-authentik-uid
- - X-authentik-jwt
- - X-authentik-meta-jwks
- - X-authentik-meta-outpost
- - X-authentik-meta-provider
- - X-authentik-meta-app
- - X-authentik-meta-version
- - authorization
----
-# Source: traefik/templates/hsts-middleware.yaml
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
- name: hsts
-spec:
- headers:
- stsSeconds: 31536000
- stsIncludeSubdomains: true
- stsPreload: true
- forceSTSHeader: true
----
-# Source: traefik/charts/traefik/templates/tlsstore.yaml
-apiVersion: traefik.io/v1alpha1
-kind: TLSStore
-metadata:
- name: default
- namespace: default
- labels:
- app.kubernetes.io/name: traefik
- app.kubernetes.io/instance: traefik-default
- helm.sh/chart: traefik-36.3.0
- app.kubernetes.io/managed-by: Helm
-spec:
- defaultCertificate:
- secretName: k0s-fullstack-wildcard
|
pipelines-github-app
bot
force-pushed
the
renovate/major-39-traefik-k0s
branch
4 times, most recently
from
03132f2 to
3b1a7df
Compare
pipelines-github-app
bot
force-pushed
the
renovate/major-39-traefik-k0s
branch
6 times, most recently
from
4b83c41 to
dcf3194
Compare
pipelines-github-app
bot
force-pushed
the
renovate/major-39-traefik-k0s
branch
3 times, most recently
from
a6a240e to
e02887b
Compare
| datasource | package | from | to | | ---------- | ------- | ------ | ------ | | helm | traefik | 36.3.0 | 39.0.0 | Co-authored-by: renovate[bot] <renovate@whitesourcesoftware.com>
pipelines-github-app
bot
force-pushed
the
renovate/major-39-traefik-k0s
branch
from
e02887b to
23d74f5
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
36.3.0->39.0.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
traefik/traefik-helm-chart (traefik)
v39.0.0Compare Source
Upgrade Notes
There are 3 breaking changes in this release:
httpnesting level with PR #1603.ℹ️ Schema validation has been enforced in this release. When it fails, it means that the parameter is not implemented.
💥 BREAKING CHANGES
httpoptions #1603 by @mloiseleur🚀 Features
📦 Others
v38.0.2Compare Source
Upgrades Notes
There is a breaking change on CRDs between Traefik Hub v3.18.0 and inferior and the CRDs of Traefik Hub v3.19.0+ preview versions (ea & rc).
With this release, we remove the CRDs of Traefik Hub v3.19.0 preview versions.
When Traefik Hub v3.19.0 is GA, we will release a new major version of this Chart that will only accept Traefik Hub v3.19.0+ versions.
🚀 Features
🐛 Bug fixes
📦 Others
New Contributors
Full Changelog: traefik/traefik-helm-chart@v38.0.1...v38.0.2
v38.0.1Compare Source
🐛 Bug fixes
http.encodedCharacterson custom entrypoints #1606 by @mloiseleurhttp.maxHeaderBytesoption #1604 by @mloiseleur📦 Others
v38.0.0Compare Source
Upgrades Notes
There are two breaking changes in this release:
💥 BREAKING CHANGES
🚀 Features
🐛 Bug fixes
📦 Others
New Contributors
Full Changelog: traefik/traefik-helm-chart@v37.4.0...v38.0.0
v37.4.0Compare Source
🚀 Features
publishedServiceto be set without service being enabled #1565 by @Wieneo📦 Others
v37.3.0Compare Source
🚀 Features
🐛 Bug fixes
📦 Others
New Contributors
Full Changelog: traefik/traefik-helm-chart@v37.2.0...v37.3.0
v37.2.0Compare Source
🚀 Features
📦 Others
v37.1.2Compare Source
🚀 Features
🐛 Bug fixes
📦 Others
v37.1.1Compare Source
🚀 Features
📦 Others
New Contributors
Full Changelog: traefik/traefik-helm-chart@v37.1.0...v37.1.1
v37.1.0Compare Source
🚀 Features
🐛 Bug fixes
📦 Others
--global.checkNewVersionwhen it differs from default #1493 by @ChristianCiach$roothacks in favor of using `- #1495 by @jnoordsijNew Contributors
Full Changelog: traefik/traefik-helm-chart@v37.0.0...v37.1.0
v37.0.0Compare Source
💥 BREAKING CHANGES
🚀 Features
🐛 Bug fixes
tracing.sampleRateto be set to zero #1483 by @yogeek📦 Others
VALUES.md#1481 by @jnoordsijNew Contributors
Full Changelog: traefik/traefik-helm-chart@v36.3.0...v37.0.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.