fix: detect correctly v3 version when using sha in image.tag

traefik/templates/_helpers.tpl

@@ -124,3 +124,8 @@ Renders a complete tree, even values that contains template.
     {{- tpl (.value | toYaml) .context }}
   {{- end }}
 {{- end -}}
+
+{{- define "imageVersion" -}}
+{{ (split "@" (default $.Chart.AppVersion $.Values.image.tag))._0 }}
+{{- end -}}
+

traefik/templates/_podtemplate.tpl

@@ -142,7 +142,7 @@
           {{- if $config }}
           - "--entrypoints.{{$name}}.address=:{{ $config.port }}/{{ default "tcp" $config.protocol | lower }}"
           {{- with $config.asDefault }}
-          {{- if semverCompare "<3.0.0-0" (default $.Chart.AppVersion $.Values.image.tag) }}
+          {{- if semverCompare "<3.0.0-0" (include "imageVersion" $) }}
             {{- fail "ERROR: Default entrypoints are only available on Traefik v3. Please set `image.tag` to `v3.x`." }}
           {{- end }}
           - "--entrypoints.{{$name}}.asDefault={{ . }}"
@@ -298,7 +298,7 @@
           {{- end }}
 
           {{- with .Values.metrics.openTelemetry }}
-           {{- if semverCompare "<3.0.0-0" (default $.Chart.AppVersion $.Values.image.tag) }}
+           {{- if semverCompare "<3.0.0-0" (include "imageVersion" $) }}
              {{- fail "ERROR: OpenTelemetry features are only available on Traefik v3. Please set `image.tag` to `v3.x`." }}
            {{- end }}
           - "--metrics.openTelemetry=true"
@@ -357,7 +357,7 @@
           {{- if .Values.tracing }}
 
           {{- if .Values.tracing.openTelemetry }}
-           {{- if semverCompare "<3.0.0-0" (default $.Chart.AppVersion $.Values.image.tag) }}
+           {{- if semverCompare "<3.0.0-0" (include "imageVersion" $) }}
              {{- fail "ERROR: OpenTelemetry features are only available on Traefik v3. Please set `image.tag` to `v3.x`." }}
            {{- end }}
           - "--tracing.openTelemetry=true"
@@ -591,10 +591,10 @@
                 {{- end }}
                 {{- if $config.http3 }}
                   {{- if $config.http3.enabled }}
-                    {{- if semverCompare "<3.0.0-0" (default $.Chart.AppVersion $.Values.image.tag)}}
+                    {{- if semverCompare "<3.0.0-0" (include "imageVersion" $)}}
           - "--experimental.http3=true"
                     {{- end }}
-                    {{- if semverCompare ">=2.6.0-0" (default $.Chart.AppVersion $.Values.image.tag)}}
+                    {{- if semverCompare ">=2.6.0-0" (include "imageVersion" $)}}
           - "--entrypoints.{{ $entrypoint }}.http3"
                     {{- else }}
           - "--entrypoints.{{ $entrypoint }}.enableHTTP3=true"

traefik/templates/ingressclass.yaml

@@ -1,5 +1,5 @@
 {{- if .Values.ingressClass.enabled -}}
-  {{- if (semverCompare "<2.3.0" (.Chart.AppVersion)) -}}
+  {{- if (semverCompare "<2.3.0" (include "imageVersion" $)) -}}
     {{- fail "ERROR: IngressClass cannot be used with Traefik < 2.3.0" -}}
   {{- end -}}
   {{- if semverCompare ">=1.19.0-0" .Capabilities.KubeVersion.Version  -}}

traefik/templates/rbac/clusterrole.yaml

@@ -45,7 +45,7 @@ rules:
 {{- if .Values.providers.kubernetesCRD.enabled }}
   - apiGroups:
       - traefik.io
-      {{- if semverCompare "<3.0.0-0" (default $.Chart.AppVersion $.Values.image.tag) }}
+      {{- if semverCompare "<3.0.0-0" (include "imageVersion" $) }}
       - traefik.containo.us
       {{- end }}
     resources:
@@ -58,7 +58,7 @@ rules:
       - tlsstores
       - traefikservices
       - serverstransports
-      {{- if semverCompare ">=3.0.0-0" (default $.Chart.AppVersion $.Values.image.tag)  }}
+      {{- if semverCompare ">=3.0.0-0" (include "imageVersion" $)  }}
       - serverstransporttcps
       {{- end }}
     verbs:

traefik/templates/rbac/role.yaml

@@ -44,7 +44,7 @@ rules:
 {{- if (and (has . $CRDNamespaces) $.Values.providers.kubernetesCRD.enabled) }}
   - apiGroups:
       - traefik.io
-      {{- if semverCompare "<3.0.0-0" (default $.Chart.AppVersion $.Values.image.tag)  }}
+      {{- if semverCompare "<3.0.0-0" (include "imageVersion" $) }}
       - traefik.containo.us
       {{- end }}
     resources:
@@ -57,7 +57,7 @@ rules:
       - tlsstores
       - traefikservices
       - serverstransports
-      {{- if semverCompare ">=3.0.0-0" (default $.Chart.AppVersion $.Values.image.tag) }}
+      {{- if semverCompare ">=3.0.0-0" (include "imageVersion" $) }}
       - serverstransporttcps
       {{- end }}
     verbs:

traefik/tests/tracing-config_test.yaml

@@ -49,6 +49,20 @@ tests:
       - contains:
           path: spec.template.spec.containers[0].args
           content: "--tracing.openTelemetry.address=localhost:4318"
+  - it: Should work with sha set
+    set:
+      image:
+        tag: v3.0.0-beta3@sha256:a56dcbeb82281b0ac99297d226195215f747242daa5a2213de02d8a09a6d9cfd
+      tracing:
+        openTelemetry:
+          address: localhost:4318
+    asserts:
+      - contains:
+          path: spec.template.spec.containers[0].args
+          content: "--tracing.openTelemetry=true"
+      - contains:
+          path: spec.template.spec.containers[0].args
+          content: "--tracing.openTelemetry.address=localhost:4318"
   - it: Address is required
     set:
       image:
@@ -70,3 +84,13 @@ tests:
     asserts:
       - failedTemplate:
           errorMessage: "OpenTelemetry features are only available on Traefik v3. Please set `image.tag` to `v3.x`."
+  - it: should throw and error when open telemetry is enabled without traefik v3, even with sha set
+    set:
+      image:
+        tag: v2.10.1@sha256:a56dcbeb82281b0ac99297d226195215f747242daa5a2213de02d8a09a6d9cfd
+      tracing:
+        openTelemetry:
+          address: "localhost:4318"
+    asserts:
+      - failedTemplate:
+          errorMessage: "OpenTelemetry features are only available on Traefik v3. Please set `image.tag` to `v3.x`."