Skip to content

feat(helm)!: Update chart traefik (38.0.2 → 39.0.8)#1176

Merged
ixxeL2097 merged 3 commits into
mainfrom
renovate/major-39-traefik-genmachine
May 13, 2026
Merged

feat(helm)!: Update chart traefik (38.0.2 → 39.0.8)#1176
ixxeL2097 merged 3 commits into
mainfrom
renovate/major-39-traefik-genmachine

Conversation

@ixxel-bot

@ixxel-bot ixxel-bot Bot commented Jan 24, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
traefik (source) major 38.0.239.0.8

Release Notes

traefik/traefik-helm-chart (traefik)

v39.0.8

Compare Source

👌 Traefik version support

  • Traefik Proxy: v3.6.x
  • Traefik Hub: v3.19.x

🚀 Features

📦 Others

v39.0.7

Compare Source

🚀 Features

📦 Others

v39.0.6

Compare Source

🚀 Features

📦 Others

v39.0.5

Compare Source

🚀 Features

🐛 Bug fixes

📦 Others

v39.0.4

Compare Source

Upgrades Notes

[!IMPORTANT]
Traefik v3.6.9 comes with CRDs update. See UPGRADING instructions.

🚀 Features

🐛 Bug fixes

📦 Others

v39.0.3

Compare Source

[!WARNING]
This release does not support Traefik v3.6.9. Updated CRDs are missing. It's recommended to use v39.0.4 for Traefik v3.6.9

🚀 Features

🐛 Bug fixes

📦 Others

v39.0.2

Compare Source

🚀 Features

📦 Others

v39.0.1

Compare Source

🚀 Features

🐛 Bug fixes

📦 Others

New Contributors

Full Changelog: traefik/traefik-helm-chart@v39.0.0...v39.0.1

v39.0.0

Compare Source

Upgrade Notes

There are 3 breaking changes in this release:

  1. Traefik Hub: This release support only Traefik Hub v3.19.0+ versions.
    • CRDs has to be upgraded before the Chart. See UPGRADING instructions.
    • It's possible to use previous versions of the Chart for previous versions of Traefik Hub.
  2. Encoded Characters: Allowed by default in Traefik v3.6.7+ (opt-in security options, documentation)
  3. Ports Configuration: HTTP options now require explicit http nesting level with PR #​1603.
    • There is a before / after example in the PR description.

ℹ️ Schema validation has been enforced in this release. When it fails, it means that the parameter is not implemented.

💥 BREAKING CHANGES

🚀 Features

📦 Others


Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@ixxel-bot ixxel-bot Bot added app/traefik Changes made to Traefik application env/genmachine Changes made in the Talos cluster renovate/helm type/major labels Jan 24, 2026
@ixxel-bot

ixxel-bot Bot commented Jan 24, 2026

Copy link
Copy Markdown
Contributor Author
--- main/traefik_gitops_manifests_traefik_beelink_manifest_main.yaml	2026-05-13 11:37:52.664016010 +0000
+++ pr/traefik_gitops_manifests_traefik_beelink_manifest_pr.yaml	2026-05-13 11:37:52.157015715 +0000
@@ -1,52 +1,52 @@
 ---
 # Source: traefik/charts/traefik/templates/poddisruptionbudget.yaml
 apiVersion: policy/v1beta1
 kind: PodDisruptionBudget
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-37.4.0
     app.kubernetes.io/managed-by: Helm
 spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: traefik
       app.kubernetes.io/instance: traefik-default
   maxUnavailable: 1
 ---
 # Source: traefik/charts/traefik/templates/rbac/serviceaccount.yaml
 kind: ServiceAccount
 apiVersion: v1
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-37.4.0
     app.kubernetes.io/managed-by: Helm
   annotations:
 automountServiceAccountToken: false
 ---
 # Source: traefik/charts/traefik/templates/rbac/clusterrole.yaml
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: traefik-default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-37.4.0
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
       - ""
     resources:
       - configmaps
       - nodes
       - services
     verbs:
       - get
@@ -84,27 +84,20 @@
       - list
       - watch
   - apiGroups:
       - extensions
       - networking.k8s.io
     resources:
       - ingresses/status
     verbs:
       - update
   - apiGroups:
-      - ""
-    resources:
-      - namespaces
-    verbs:
-      - list
-      - watch
-  - apiGroups:
       - traefik.io
     resources:
       - ingressroutes
       - ingressroutetcps
       - ingressrouteudps
       - middlewares
       - middlewaretcps
       - serverstransports
       - serverstransporttcps
       - tlsoptions
@@ -116,41 +109,41 @@
       - watch
 ---
 # Source: traefik/charts/traefik/templates/rbac/clusterrolebinding.yaml
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: traefik-default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-37.4.0
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: traefik-default
 subjects:
   - kind: ServiceAccount
     name: traefik
     namespace: default
 ---
 # Source: traefik/charts/traefik/templates/service.yaml
 apiVersion: v1
 kind: Service
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-37.4.0
     app.kubernetes.io/managed-by: Helm
   annotations:
 spec:
   type: LoadBalancer
   selector:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
   ipFamilyPolicy: PreferDualStack
   ports:
   - port: 80
@@ -164,21 +157,21 @@
 ---
 # Source: traefik/charts/traefik/templates/deployment.yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-37.4.0
     app.kubernetes.io/managed-by: Helm
   annotations:
 spec:
   replicas: 1
   selector:
     matchLabels:
       app.kubernetes.io/name: traefik
       app.kubernetes.io/instance: traefik-default
   strategy:
     type: RollingUpdate
@@ -188,21 +181,21 @@
   minReadySeconds: 0
   template: 
     metadata:
       annotations:
         prometheus.io/scrape: "true"
         prometheus.io/path: "/metrics"
         prometheus.io/port: "9100"
       labels:
         app.kubernetes.io/name: traefik
         app.kubernetes.io/instance: traefik-default
-        helm.sh/chart: traefik-38.0.2
+        helm.sh/chart: traefik-37.4.0
         app.kubernetes.io/managed-by: Helm
     spec:
       serviceAccountName: traefik
       automountServiceAccountToken: true
       terminationGracePeriodSeconds: 60
       hostNetwork: false
       containers:
       - image: docker.io/traefik:v3.7.1
         imagePullPolicy: IfNotPresent
         name: traefik
@@ -300,33 +293,31 @@
           key: node-role.kubernetes.io/control-plane
           operator: Exists
         - effect: NoSchedule
           key: node-role.kubernetes.io/master
           operator: Exists
       priorityClassName: system-cluster-critical
       securityContext:
         runAsGroup: 65532
         runAsNonRoot: true
         runAsUser: 65532
-        seccompProfile:
-          type: RuntimeDefault
 ---
 # Source: traefik/charts/traefik/templates/ingressclass.yaml
 apiVersion: networking.k8s.io/v1
 kind: IngressClass
 metadata:
   annotations:
     ingressclass.kubernetes.io/is-default-class: "true"
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-37.4.0
     app.kubernetes.io/managed-by: Helm
   name: traefik
 spec:
   controller: traefik.io/ingress-controller
 ---
 # Source: traefik/templates/extsecret-wildcard-cert.yaml
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
   name: fredcorp-wildcard
@@ -447,15 +438,15 @@
 ---
 # Source: traefik/charts/traefik/templates/tlsstore.yaml
 apiVersion: traefik.io/v1alpha1
 kind: TLSStore
 metadata:
   name: default
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-37.4.0
     app.kubernetes.io/managed-by: Helm
 spec:
   defaultCertificate:
     secretName: k0s-fullstack-wildcard
 
--- main/traefik_gitops_manifests_traefik_genmachine_manifest_main.yaml	2026-05-13 11:37:53.678016599 +0000
+++ pr/traefik_gitops_manifests_traefik_genmachine_manifest_pr.yaml	2026-05-13 11:37:53.177016308 +0000
@@ -1,52 +1,52 @@
 ---
 # Source: traefik/charts/traefik/templates/poddisruptionbudget.yaml
 apiVersion: policy/v1beta1
 kind: PodDisruptionBudget
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-39.0.8
     app.kubernetes.io/managed-by: Helm
 spec:
   selector:
     matchLabels:
       app.kubernetes.io/name: traefik
       app.kubernetes.io/instance: traefik-default
   maxUnavailable: 1
 ---
 # Source: traefik/charts/traefik/templates/rbac/serviceaccount.yaml
 kind: ServiceAccount
 apiVersion: v1
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-39.0.8
     app.kubernetes.io/managed-by: Helm
   annotations:
 automountServiceAccountToken: false
 ---
 # Source: traefik/charts/traefik/templates/rbac/clusterrole.yaml
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: traefik-default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-39.0.8
     app.kubernetes.io/managed-by: Helm
 rules:
   - apiGroups:
       - ""
     resources:
       - configmaps
       - nodes
       - services
     verbs:
       - get
@@ -86,20 +86,21 @@
   - apiGroups:
       - extensions
       - networking.k8s.io
     resources:
       - ingresses/status
     verbs:
       - update
   - apiGroups:
       - ""
     resources:
+      - configmaps
       - namespaces
     verbs:
       - list
       - watch
   - apiGroups:
       - traefik.io
     resources:
       - ingressroutes
       - ingressroutetcps
       - ingressrouteudps
@@ -116,42 +117,42 @@
       - watch
 ---
 # Source: traefik/charts/traefik/templates/rbac/clusterrolebinding.yaml
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
   name: traefik-default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-39.0.8
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: traefik-default
 subjects:
   - kind: ServiceAccount
     name: traefik
     namespace: default
 ---
 # Source: traefik/charts/traefik/templates/service-metrics.yaml
 apiVersion: v1
 kind: Service
 metadata:
   name: traefik-metrics
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
     app.kubernetes.io/component: metrics
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-39.0.8
     app.kubernetes.io/managed-by: Helm
   annotations:
 spec:
   type: ClusterIP
   selector:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
   ports:
   - port: 9100
     name: metrics
@@ -160,21 +161,21 @@
 ---
 # Source: traefik/charts/traefik/templates/service.yaml
 apiVersion: v1
 kind: Service
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-39.0.8
     app.kubernetes.io/managed-by: Helm
   annotations:
 spec:
   type: LoadBalancer
   selector:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
   ipFamilyPolicy: PreferDualStack
   ports:
   - port: 80
@@ -188,165 +189,165 @@
 ---
 # Source: traefik/charts/traefik/templates/deployment.yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-39.0.8
     app.kubernetes.io/managed-by: Helm
   annotations:
 spec:
   replicas: 2
   selector:
     matchLabels:
       app.kubernetes.io/name: traefik
       app.kubernetes.io/instance: traefik-default
   strategy:
     type: RollingUpdate
     rollingUpdate:
       maxUnavailable: 0
       maxSurge: 1
   minReadySeconds: 0
+  
   template: 
     metadata:
-      annotations:
+      annotations: null
       labels:
-        app.kubernetes.io/name: traefik
         app.kubernetes.io/instance: traefik-default
-        helm.sh/chart: traefik-38.0.2
         app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: traefik
+        helm.sh/chart: traefik-39.0.8
     spec:
-      serviceAccountName: traefik
       automountServiceAccountToken: true
-      terminationGracePeriodSeconds: 60
-      hostNetwork: false
       containers:
-      - image: docker.io/traefik:v3.7.1
+      - args:
+        - --global.checkNewVersion=false
+        - --entryPoints.metrics.address=:9100/tcp
+        - --entryPoints.traefik.address=:8080/tcp
+        - --entryPoints.web.address=:8000/tcp
+        - --entryPoints.websecure.address=:8443/tcp
+        - --api.dashboard=true
+        - --ping=true
+        - --metrics.addinternals
+        - --metrics.prometheus=true
+        - --metrics.prometheus.entrypoint=metrics
+        - --providers.kubernetescrd
+        - --providers.kubernetescrd.allowCrossNamespace=true
+        - --providers.kubernetescrd.allowExternalNameServices=true
+        - --providers.kubernetescrd.allowEmptyServices=true
+        - --providers.kubernetesingress
+        - --providers.kubernetesingress.allowExternalNameServices=true
+        - --providers.kubernetesingress.allowEmptyServices=true
+        - --providers.kubernetesingress.ingressendpoint.publishedservice=default/traefik
+        - --entryPoints.web.http.redirections.entryPoint.to=:443
+        - --entryPoints.web.http.redirections.entryPoint.scheme=https
+        - --entryPoints.websecure.http.tls=true
+        - --log.level=TRACE
+        env:
+        - name: POD_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.name
+        - name: POD_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: USER
+          value: traefik
+        image: docker.io/traefik:v3.7.1
         imagePullPolicy: IfNotPresent
-        name: traefik
-        resources:
-        readinessProbe:
+        lifecycle: null
+        livenessProbe:
+          failureThreshold: 3
           httpGet:
             path: /ping
             port: 8080
             scheme: HTTP
-          failureThreshold: 1
           initialDelaySeconds: 2
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 2
-        livenessProbe:
+        name: traefik
+        ports:
+        - containerPort: 9100
+          name: metrics
+          protocol: TCP
+        - containerPort: 8080
+          name: traefik
+          protocol: TCP
+        - containerPort: 8000
+          name: web
+          protocol: TCP
+        - containerPort: 8443
+          name: websecure
+          protocol: TCP
+        readinessProbe:
+          failureThreshold: 1
           httpGet:
             path: /ping
             port: 8080
             scheme: HTTP
-          failureThreshold: 3
           initialDelaySeconds: 2
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 2
-        lifecycle:
-        ports:
-        - name: metrics
-          containerPort: 9100
-          protocol: TCP
-        - name: traefik
-          containerPort: 8080
-          protocol: TCP
-        - name: web
-          containerPort: 8000
-          protocol: TCP
-        - name: websecure
-          containerPort: 8443
-          protocol: TCP
+        resources: null
         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
         volumeMounts:
-          - name: data
-            mountPath: /data
-          - name: tmp
-            mountPath: /tmp
-
-        args:
-          - "--entryPoints.metrics.address=:9100/tcp"
-          - "--entryPoints.traefik.address=:8080/tcp"
-          - "--entryPoints.web.address=:8000/tcp"
-          - "--entryPoints.websecure.address=:8443/tcp"
-          - "--api.dashboard=true"
-          - "--ping=true"
-          - "--metrics.addinternals"
-          - "--metrics.prometheus=true"
-          - "--metrics.prometheus.entrypoint=metrics"
-        
-        
-          - "--providers.kubernetescrd"
-          - "--providers.kubernetescrd.allowCrossNamespace=true"
-          - "--providers.kubernetescrd.allowExternalNameServices=true"
-          - "--providers.kubernetescrd.allowEmptyServices=true"
-          - "--providers.kubernetesingress"
-          - "--providers.kubernetesingress.allowExternalNameServices=true"
-          - "--providers.kubernetesingress.allowEmptyServices=true"
-          - "--providers.kubernetesingress.ingressendpoint.publishedservice=default/traefik"
-          - "--entryPoints.websecure.http.tls=true"
-          - "--log.level=TRACE"
-        
-        env:
-          - name: POD_NAME
-            valueFrom:
-              fieldRef:
-                fieldPath: metadata.name
-          - name: POD_NAMESPACE
-            valueFrom:
-              fieldRef:
-                fieldPath: metadata.namespace
-          - name: USER
-            value: traefik
-      volumes:
-        - name: data
-          emptyDir: {}
-        - name: tmp
-          emptyDir: {}
-      tolerations:
-        - key: CriticalAddonsOnly
-          operator: Exists
-        - effect: NoSchedule
-          key: node-role.kubernetes.io/control-plane
-          operator: Exists
-        - effect: NoSchedule
-          key: node-role.kubernetes.io/master
-          operator: Exists
+        - mountPath: /data
+          name: data
+        - mountPath: /tmp
+          name: tmp
+      hostNetwork: false
       priorityClassName: system-cluster-critical
       securityContext:
         runAsGroup: 65532
         runAsNonRoot: true
         runAsUser: 65532
         seccompProfile:
           type: RuntimeDefault
+      serviceAccountName: traefik
+      terminationGracePeriodSeconds: 60
+      tolerations:
+      - key: CriticalAddonsOnly
+        operator: Exists
+      - effect: NoSchedule
+        key: node-role.kubernetes.io/control-plane
+        operator: Exists
+      - effect: NoSchedule
+        key: node-role.kubernetes.io/master
+        operator: Exists
+      volumes:
+      - emptyDir: {}
+        name: data
+      - emptyDir: {}
+        name: tmp
 ---
 # Source: traefik/charts/traefik/templates/ingressclass.yaml
 apiVersion: networking.k8s.io/v1
 kind: IngressClass
 metadata:
   annotations:
     ingressclass.kubernetes.io/is-default-class: "true"
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-39.0.8
     app.kubernetes.io/managed-by: Helm
   name: traefik
 spec:
   controller: traefik.io/ingress-controller
 ---
 # Source: traefik/templates/wildcard-genmachine.yaml
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
   name: genmachine-wildcard
@@ -484,21 +485,21 @@
 # Source: traefik/charts/traefik/templates/servicemonitor.yaml
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: traefik
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
     app.kubernetes.io/component: metrics
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-39.0.8
     app.kubernetes.io/managed-by: Helm
     release: prometheus
 spec:
   jobLabel: traefik
   endpoints:
     - targetPort: metrics
       path: /metrics
   namespaceSelector:
     matchNames:
       - default
@@ -510,15 +511,15 @@
 ---
 # Source: traefik/charts/traefik/templates/tlsstore.yaml
 apiVersion: traefik.io/v1alpha1
 kind: TLSStore
 metadata:
   name: default
   namespace: default
   labels:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-default
-    helm.sh/chart: traefik-38.0.2
+    helm.sh/chart: traefik-39.0.8
     app.kubernetes.io/managed-by: Helm
 spec:
   defaultCertificate:
     secretName: genmachine-wildcard
 

@ixxel-bot ixxel-bot Bot force-pushed the renovate/major-39-traefik-genmachine branch 4 times, most recently from cf74241 to 99d6583 Compare January 30, 2026 04:28
@ixxel-bot ixxel-bot Bot force-pushed the renovate/major-39-traefik-genmachine branch 6 times, most recently from 3d5c9ab to 8d1ad3b Compare February 6, 2026 04:44
@ixxel-bot ixxel-bot Bot force-pushed the renovate/major-39-traefik-genmachine branch 5 times, most recently from 4ffaf79 to 0c7975f Compare February 13, 2026 04:51
@ixxel-bot ixxel-bot Bot changed the title feat(helm)!: Update Chart traefik (37.4.0 → 39.0.0) feat(helm)!: Update Chart traefik (37.4.0 → 39.0.1) Feb 14, 2026
@ixxel-bot ixxel-bot Bot force-pushed the renovate/major-39-traefik-genmachine branch 6 times, most recently from 06f1cf1 to 35d83b0 Compare February 20, 2026 04:33
@ixxel-bot ixxel-bot Bot force-pushed the renovate/major-39-traefik-genmachine branch 2 times, most recently from 0aca455 to 6e89bce Compare March 7, 2026 04:20
@ixxel-bot ixxel-bot Bot changed the title feat(helm)!: Update Chart traefik (37.4.0 → 39.0.4) feat(helm)!: Update Chart traefik (37.4.0 → 39.0.5) Mar 10, 2026
@ixxel-bot ixxel-bot Bot force-pushed the renovate/major-39-traefik-genmachine branch 6 times, most recently from 870c58a to 3991f18 Compare March 15, 2026 05:03
@ixxel-bot ixxel-bot Bot force-pushed the renovate/major-39-traefik-genmachine branch 4 times, most recently from 0652186 to 427cf9a Compare March 20, 2026 04:34
@ixxel-bot ixxel-bot Bot changed the title feat(helm)!: Update Chart traefik (37.4.0 → 39.0.5) feat(helm)!: Update Chart traefik (37.4.0 → 39.0.6) Mar 21, 2026
@ixxel-bot ixxel-bot Bot force-pushed the renovate/major-39-traefik-genmachine branch 7 times, most recently from 9d37f87 to 810c4b6 Compare March 27, 2026 05:04
@ixxel-bot ixxel-bot Bot force-pushed the renovate/major-39-traefik-genmachine branch 3 times, most recently from aa389f4 to 0776684 Compare March 31, 2026 04:41
@ixxel-bot ixxel-bot Bot changed the title feat(helm)!: Update Chart traefik (37.4.0 → 39.0.6) feat(helm)!: Update Chart traefik (37.4.0 → 39.0.7) Mar 31, 2026
@ixxel-bot ixxel-bot Bot force-pushed the renovate/major-39-traefik-genmachine branch 2 times, most recently from 34cb29f to 63b7d0e Compare April 1, 2026 05:18
ixxel-bot Bot and others added 3 commits May 13, 2026 13:33
| datasource | package | from   | to     |
| ---------- | ------- | ------ | ------ |
| helm       | traefik | 38.0.2 | 39.0.8 |


Co-authored-by: renovate[bot] <renovate@whitesourcesoftware.com>
v39.0.0 introduced strict schema validation with two breaking changes:

1. ports.web.redirections → ports.web.http.redirections
   HTTP options now require explicit 'http' nesting level (PR #1603)

2. globalArguments removed → replaced by checkNewVersion/sendAnonymousUsage
   top-level values (or additionalArguments for arbitrary CLI flags)

Since common-values.yaml is shared between beelink (v37) and genmachine (v39),
breaking values are moved to cluster-specific files:
- common: remove ports.web.redirections and globalArguments
- genmachine (v39): add ports.web.http.redirections + checkNewVersion/sendAnonymousUsage
- beelink (v37): keep old syntax ports.web.redirections + globalArguments (v37 has no strict schema)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…r global

In v39 schema, these values are nested under 'global' not at root level.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

app/traefik Changes made to Traefik application env/genmachine Changes made in the Talos cluster type/major

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant