Skip to content

feat(helm)!: Update Chart traefik (36.3.0 → 38.0.2)#1112

Open
pipelines-github-app[bot] wants to merge 1 commit intomainfrom
renovate/major-38-traefik-k0s
Open

feat(helm)!: Update Chart traefik (36.3.0 → 38.0.2)#1112
pipelines-github-app[bot] wants to merge 1 commit intomainfrom
renovate/major-38-traefik-k0s

Conversation

@pipelines-github-app
Copy link
Copy Markdown
Contributor

@pipelines-github-app pipelines-github-app bot commented Dec 19, 2025 •
edited
Loading

This PR contains the following updates:

Package Update Change
traefik (source) major 36.3.0 -> 38.0.2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

traefik/traefik-helm-chart (traefik)

v38.0.2

Compare Source

Upgrades Notes

There is a breaking change on CRDs between Traefik Hub v3.18.0 and inferior and the CRDs of Traefik Hub v3.19.0+ preview versions (ea & rc).
With this release, we remove the CRDs of Traefik Hub v3.19.0 preview versions.

When Traefik Hub v3.19.0 is GA, we will release a new major version of this Chart that will only accept Traefik Hub v3.19.0+ versions.

🚀 Features

🐛 Bug fixes

📦 Others

New Contributors

Full Changelog: traefik/traefik-helm-chart@v38.0.1...v38.0.2

v38.0.1

Compare Source

🐛 Bug fixes

📦 Others

v38.0.0

Compare Source

Upgrades Notes

[!IMPORTANT]
CRDs has to be upgraded before the Chart. See UPGRADING instructions.

There are two breaking changes in this release:

  1. Traefik Proxy v3.6.4+ contains a security fix that is also a breaking change. See upstream documentation for more details.
  2. PR #​1596 align kubernetesIngressNginx provider setting with upstream. There is a before / after example in the PR description and PR #​1587 align labelSelector syntax between providers

[!NOTE]
If you need to restore Traefik behavior of v3.6.3 or inferior, it can be set with values.

Here is an example on websecure entrypoint:

ports:
  websecure:
    http:
      encodedCharacters:
        allowEncodedSlash: true
        allowEncodedBackSlash: true
        allowEncodedNullCharacter: true
        allowEncodedSemicolon: true
        allowEncodedPercent: true
        allowEncodedQuestionMark: true
        allowEncodedHash: true
      sanitizePath: false

This is not recommended, it may expose you to GHSA-gm3x-23wp-hc2c.

💥 BREAKING CHANGES

🚀 Features

🐛 Bug fixes

📦 Others

New Contributors

Full Changelog: traefik/traefik-helm-chart@v37.4.0...v38.0.0

v37.4.0

Compare Source

🚀 Features

📦 Others

v37.3.0

Compare Source

[!IMPORTANT]
CRDs has to be upgraded before the Chart. See UPGRADING instructions.

🚀 Features

🐛 Bug fixes

📦 Others

New Contributors

Full Changelog: traefik/traefik-helm-chart@v37.2.0...v37.3.0

v37.2.0

Compare Source

🚀 Features

📦 Others

v37.1.2

Compare Source

🚀 Features

🐛 Bug fixes

📦 Others

v37.1.1

Compare Source

🚀 Features

📦 Others

New Contributors

Full Changelog: traefik/traefik-helm-chart@v37.1.0...v37.1.1

v37.1.0

Compare Source

🚀 Features

🐛 Bug fixes

📦 Others

New Contributors

Full Changelog: traefik/traefik-helm-chart@v37.0.0...v37.1.0

v37.0.0

Compare Source

💥 BREAKING CHANGES

🚀 Features

🐛 Bug fixes

📦 Others

New Contributors

Full Changelog: traefik/traefik-helm-chart@v36.3.0...v37.0.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@pipelines-github-app pipelines-github-app bot added app/traefik Changes made to Traefik application env/k0s renovate/helm Changes related to Helm Chart update type/major labels Dec 19, 2025
@pipelines-github-app
Copy link
Copy Markdown
Contributor Author

pipelines-github-app bot commented Dec 19, 2025 •
edited
Loading 

--- main/traefik_gitops_manifests_traefik_k0s_manifest_main.yaml	2026-04-16 05:26:40.224554490 +0000
+++ pr/traefik_gitops_manifests_traefik_k0s_manifest_pr.yaml	2026-04-16 05:26:39.553543281 +0000
@@ -1,52 +1,52 @@
 ---
 # Source: traefik/charts/traefik/templates/poddisruptionbudget.yaml
 apiVersion: policy/v1beta1
 kind: PodDisruptionBudget
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-36.3.0
+    helm.sh/chart: traefik-38.0.2
     app.kubernetes.io/managed-by: Helm
 spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: traefik
       app.kubernetes.io/instance: traefik-default
   maxUnavailable: 1
 ---
 # Source: traefik/charts/traefik/templates/rbac/serviceaccount.yaml
 kind: ServiceAccount
 apiVersion: v1
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-36.3.0
+    helm.sh/chart: traefik-38.0.2
     app.kubernetes.io/managed-by: Helm
   annotations:
 automountServiceAccountToken: false
 ---
 # Source: traefik/charts/traefik/templates/rbac/clusterrole.yaml
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: traefik-default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-36.3.0
+    helm.sh/chart: traefik-38.0.2
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
       - ""
     resources:
       - configmaps
       - nodes
       - services
     verbs:
       - get
@@ -55,20 +55,26 @@
   - apiGroups:
       - discovery.k8s.io
     resources:
       - endpointslices
     verbs:
       - list
       - watch
   - apiGroups:
       - ""
     resources:
+      - pods
+    verbs:
+      - get
+  - apiGroups:
+      - ""
+    resources:
       - secrets
     verbs:
       - get
       - list
       - watch
   - apiGroups:
       - extensions
       - networking.k8s.io
     resources:
       - ingressclasses
@@ -78,20 +84,27 @@
       - list
       - watch
   - apiGroups:
       - extensions
       - networking.k8s.io
     resources:
       - ingresses/status
     verbs:
       - update
   - apiGroups:
+      - ""
+    resources:
+      - namespaces
+    verbs:
+      - list
+      - watch
+  - apiGroups:
       - traefik.io
     resources:
       - ingressroutes
       - ingressroutetcps
       - ingressrouteudps
       - middlewares
       - middlewaretcps
       - serverstransports
       - serverstransporttcps
       - tlsoptions
@@ -103,41 +116,41 @@
       - watch
 ---
 # Source: traefik/charts/traefik/templates/rbac/clusterrolebinding.yaml
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: traefik-default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-36.3.0
+    helm.sh/chart: traefik-38.0.2
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: traefik-default
 subjects:
   - kind: ServiceAccount
     name: traefik
     namespace: default
 ---
 # Source: traefik/charts/traefik/templates/service.yaml
 apiVersion: v1
 kind: Service
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-36.3.0
+    helm.sh/chart: traefik-38.0.2
     app.kubernetes.io/managed-by: Helm
   annotations:
 spec:
   type: LoadBalancer
   selector:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
   ipFamilyPolicy: PreferDualStack
   ports:
   - port: 80
@@ -151,21 +164,21 @@
 ---
 # Source: traefik/charts/traefik/templates/deployment.yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-36.3.0
+    helm.sh/chart: traefik-38.0.2
     app.kubernetes.io/managed-by: Helm
   annotations:
 spec:
   replicas: 1
   selector:
     matchLabels:
       app.kubernetes.io/name: traefik
       app.kubernetes.io/instance: traefik-default
   strategy:
     type: RollingUpdate
@@ -175,21 +188,21 @@
   minReadySeconds: 0
   template: 
     metadata:
       annotations:
         prometheus.io/scrape: "true"
         prometheus.io/path: "/metrics"
         prometheus.io/port: "9100"
       labels:
         app.kubernetes.io/name: traefik
         app.kubernetes.io/instance: traefik-default
-        helm.sh/chart: traefik-36.3.0
+        helm.sh/chart: traefik-38.0.2
         app.kubernetes.io/managed-by: Helm
     spec:
       serviceAccountName: traefik
       automountServiceAccountToken: true
       terminationGracePeriodSeconds: 60
       hostNetwork: false
       containers:
       - image: docker.io/traefik:v3.6.13
         imagePullPolicy: IfNotPresent
         name: traefik
@@ -232,82 +245,88 @@
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
         volumeMounts:
           - name: data
             mountPath: /data
           - name: tmp
             mountPath: /tmp
+
         args:
-          - "--global.checkNewVersion"
           - "--entryPoints.metrics.address=:9100/tcp"
           - "--entryPoints.traefik.address=:8080/tcp"
           - "--entryPoints.web.address=:8000/tcp"
           - "--entryPoints.websecure.address=:8443/tcp"
           - "--api.dashboard=true"
           - "--ping=true"
           - "--metrics.prometheus=true"
           - "--metrics.prometheus.entrypoint=metrics"
+        
+        
           - "--providers.kubernetescrd"
           - "--providers.kubernetescrd.allowCrossNamespace=true"
           - "--providers.kubernetescrd.allowExternalNameServices=true"
           - "--providers.kubernetescrd.allowEmptyServices=true"
           - "--providers.kubernetesingress"
           - "--providers.kubernetesingress.allowExternalNameServices=true"
           - "--providers.kubernetesingress.allowEmptyServices=true"
           - "--providers.kubernetesingress.ingressendpoint.publishedservice=default/traefik"
           - "--entryPoints.web.http.redirections.entryPoint.to=:443"
           - "--entryPoints.web.http.redirections.entryPoint.scheme=https"
           - "--entryPoints.websecure.http.tls=true"
           - "--log.level=TRACE"
-          
+        
         env:
           - name: POD_NAME
             valueFrom:
               fieldRef:
                 fieldPath: metadata.name
           - name: POD_NAMESPACE
             valueFrom:
               fieldRef:
                 fieldPath: metadata.namespace
+          - name: USER
+            value: traefik
       volumes:
         - name: data
           emptyDir: {}
         - name: tmp
           emptyDir: {}
       tolerations:
         - key: CriticalAddonsOnly
           operator: Exists
         - effect: NoSchedule
           key: node-role.kubernetes.io/control-plane
           operator: Exists
         - effect: NoSchedule
           key: node-role.kubernetes.io/master
           operator: Exists
       priorityClassName: system-cluster-critical
       securityContext:
         runAsGroup: 65532
         runAsNonRoot: true
         runAsUser: 65532
+        seccompProfile:
+          type: RuntimeDefault
 ---
 # Source: traefik/charts/traefik/templates/ingressclass.yaml
 apiVersion: networking.k8s.io/v1
 kind: IngressClass
 metadata:
   annotations:
     ingressclass.kubernetes.io/is-default-class: "true"
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-36.3.0
+    helm.sh/chart: traefik-38.0.2
     app.kubernetes.io/managed-by: Helm
   name: traefik
 spec:
   controller: traefik.io/ingress-controller
 ---
 # Source: traefik/templates/extsecret-wildcard-cert.yaml
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: fredcorp-wildcard
@@ -428,15 +447,15 @@
 ---
 # Source: traefik/charts/traefik/templates/tlsstore.yaml
 apiVersion: traefik.io/v1alpha1
 kind: TLSStore
 metadata:
   name: default
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-36.3.0
+    helm.sh/chart: traefik-38.0.2
     app.kubernetes.io/managed-by: Helm
 spec:
   defaultCertificate:
     secretName: k0s-fullstack-wildcard

@pipelines-github-app pipelines-github-app bot force-pushed the renovate/major-38-traefik-k0s branch 2 times, most recently from d540611 to ef99d21 Compare December 20, 2025 03:20
@pipelines-github-app pipelines-github-app bot changed the title feat(helm)!: Update Chart traefik (36.3.0 → 38.0.0) feat(helm)!: Update Chart traefik (36.3.0 → 38.0.1) Dec 20, 2025
@pipelines-github-app pipelines-github-app bot force-pushed the renovate/major-38-traefik-k0s branch 5 times, most recently from 0c3d8e8 to acdb796 Compare December 26, 2025 03:56
@pipelines-github-app pipelines-github-app bot force-pushed the renovate/major-38-traefik-k0s branch 3 times, most recently from e077421 to ca9bf54 Compare January 3, 2026 03:53
@pipelines-github-app pipelines-github-app bot force-pushed the renovate/major-38-traefik-k0s branch 5 times, most recently from 18ab73b to ad789e1 Compare January 8, 2026 04:00
@pipelines-github-app pipelines-github-app bot changed the title feat(helm)!: Update Chart traefik (36.3.0 → 38.0.1) feat(helm)!: Update Chart traefik (36.3.0 → 38.0.2) Jan 9, 2026
@pipelines-github-app pipelines-github-app bot force-pushed the renovate/major-38-traefik-k0s branch 5 times, most recently from e6e0d3c to 378314a Compare January 14, 2026 04:07
@pipelines-github-app pipelines-github-app bot force-pushed the renovate/major-38-traefik-k0s branch 7 times, most recently from 8d6fd45 to fa84af3 Compare February 8, 2026 04:58
@pipelines-github-app pipelines-github-app bot force-pushed the renovate/major-38-traefik-k0s branch 5 times, most recently from 55c801c to 1348037 Compare February 18, 2026 04:50
@pipelines-github-app pipelines-github-app bot force-pushed the renovate/major-38-traefik-k0s branch 7 times, most recently from 0e9c269 to 3d68cd7 Compare February 25, 2026 04:50
@pipelines-github-app pipelines-github-app bot force-pushed the renovate/major-38-traefik-k0s branch 6 times, most recently from 7a61b1c to fa79537 Compare March 5, 2026 04:31
@pipelines-github-app pipelines-github-app bot force-pushed the renovate/major-38-traefik-k0s branch 4 times, most recently from c7db845 to e4ab1e8 Compare March 11, 2026 04:30
@pipelines-github-app @renovate-bot
feat(helm)!: Update Chart traefik (36.3.0 → 38.0.2)
5acdd73 
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| helm       | traefik | 36.3.0 | 38.0.2 |


Co-authored-by: renovate[bot] <renovate@whitesourcesoftware.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

app/traefik Changes made to Traefik application env/k0s renovate/helm Changes related to Helm Chart update type/major

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants