chore(base-cluster/dependencies): update helm release traefik to v38

[renovate]

This PR contains the following updates:

Package	Update	Change
traefik (source)	major	37.4.0 → 38.0.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

traefik/traefik-helm-chart (traefik)

v38.0.2

Compare Source

Upgrades Notes

There is a breaking change on CRDs between Traefik Hub v3.18.0 and inferior and the CRDs of Traefik Hub v3.19.0+ preview versions (ea & rc).
With this release, we remove the CRDs of Traefik Hub v3.19.0 preview versions.

When Traefik Hub v3.19.0 is GA, we will release a new major version of this Chart that will only accept Traefik Hub v3.19.0+ versions.

🚀 Features

• feat(deps): update traefik docker tag to v3.6.6 #​1610 by @​renovate[bot]

🐛 Bug fixes

• fix(CRDs): enforce the fact that this Chart does not support Traefik Hub v3.19.0 #​1616 by @​mloiseleur
• fix(security): set the seccomp profile to RuntimeDefault #​1618 by @​kkrypt0nn

📦 Others

• docs(CRDs): add deprecation notice #​1617 by @​mloiseleur
• chore(release): publish traefik 38.0.2 and crds 1.13.1 #​1619 by @​mloiseleur

New Contributors

• @​kkrypt0nn made their first contribution in #​1618

Full Changelog: traefik/traefik-helm-chart@v38.0.1...v38.0.2

v38.0.1

Compare Source

🐛 Bug fixes

• fix(ports): 🐛 http.encodedCharacters on custom entrypoints #​1606 by @​mloiseleur
• fix(ports): 🐛 add missing http.maxHeaderBytes option #​1604 by @​mloiseleur

📦 Others

• chore(release): 🚀 publish traefik 38.0.1 #​1608 by @​mloiseleur

v38.0.0

Compare Source

Upgrades Notes

[!IMPORTANT]
CRDs has to be upgraded before the Chart. See UPGRADING instructions.

There are two breaking changes in this release:

1. Traefik Proxy v3.6.4+ contains a security fix that is also a breaking change. See upstream documentation for more details.
2. PR #​1596 align kubernetesIngressNginx provider setting with upstream. There is a before / after example in the PR description and PR #​1587 align labelSelector syntax between providers

[!NOTE]
If you need to restore Traefik behavior of v3.6.3 or inferior, it can be set with values.

Here is an example on websecure entrypoint:

ports:
  websecure:
    http:
      encodedCharacters:
        allowEncodedSlash: true
        allowEncodedBackSlash: true
        allowEncodedNullCharacter: true
        allowEncodedSemicolon: true
        allowEncodedPercent: true
        allowEncodedQuestionMark: true
        allowEncodedHash: true
      sanitizePath: false

This is not recommended, it may expose you to GHSA-gm3x-23wp-hc2c.

💥 BREAKING CHANGES

• fix(providers)!: align labelSelector for kubernetesGateway and knative #​1587 by @​shubhamch71
• fix(nginx)!: 🐛 align provider settings and provide required rbac #​1596 by @​mloiseleur

🚀 Features

• feat(CRDs): update Traefik Hub to v1.24.1, with required RBACs #​1571 by @​jspdown
• feat(ports): enforce schema #​1586 by @​remyj38
• feat(CRDs): update Traefik Hub to v1.24.2 #​1585 by @​traefiker
• feat(providers): ✨ enforce schema #​1595 by @​mloiseleur
• feat(security): ✨ 🔒️ add support for request path options of traefik 3.6.4+ #​1594 by @​mloiseleur
• feat(deps): update traefik docker tag to v3.6.4 #​1590 by @​renovate[bot]
• feat(deps): update traefik docker tag to v3.6.5 #​1599 by @​renovate[bot]

🐛 Bug fixes

• fix: update error message for maxUnavailable validation #​1591 by @​lucasra1
• fix(notes): minor typo #​1593 by @​rndmh3ro
• fix(pvc): allow empty storageClassName #​1579 by @​fopina
• fix(providers): ✨ enforce schema for all providers #​1601 by @​mloiseleur

📦 Others

• chore(deps): update actions/checkout action to v6 #​1573 by @​renovate[bot]
• docs: Update EXAMPLES.md with REGIONAL load balancer note for Digital Ocean #​1574 by @​kamikazechaser
• chore(release): 🚀 publish traefik 38.0.0 and crds 1.13.0 #​1600 by @​mloiseleur

New Contributors

• @​shubhamch71 made their first contribution in #​1587
• @​kamikazechaser made their first contribution in #​1574
• @​lucasra1 made their first contribution in #​1591
• @​remyj38 made their first contribution in #​1586
• @​rndmh3ro made their first contribution in #​1593
• @​fopina made their first contribution in #​1579

Full Changelog: traefik/traefik-helm-chart@v37.4.0...v38.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}