fix(hub): 🐛 correct apiManagement openApi refreshInterval default and gate

Author: darkweaver87

traefik/VALUES.md

@@ -146,7 +146,7 @@ Kubernetes: `>=1.25.0-0`
 | hub.apimanagement.admission.secretName | string | `"hub-agent-cert"` | Certificate name of the WebHook admission server. Default: "hub-agent-cert". |
 | hub.apimanagement.admission.selfManagedCertificate | bool | `false` | By default, this chart handles directly the tls certificate required for the admission webhook. It's possible to disable this behavior and handle it outside of the chart. See EXAMPLES.md for more details. |
 | hub.apimanagement.enabled | bool | `false` | Set to true in order to enable API Management. Requires a valid license token. |
-| hub.apimanagement.openApi.refreshInterval | string | `""` | Interval to refresh the OpenAPI specification, as a Go duration. When empty, the provider default (`0`, disabled) applies. |
+| hub.apimanagement.openApi.refreshInterval | string | `""` | Interval to refresh the OpenAPI specification, as a Go duration. Must be at least `1m`. When empty, the Traefik Hub default (`1m`) applies. |
 | hub.apimanagement.openApi.validateRequestMethodAndPath | bool | `false` | When set to true, it will only accept paths and methods that are explicitly defined in its OpenAPI specification |
 | hub.enabled | bool | `true` when `hub.token` is set | Install Traefik Hub. Without `hub.token`, it runs in proxy mode: a drop-in Traefik Proxy, which requires Traefik Hub >= v3.21.0-ea. |
 | hub.hardened | bool | `false` | Use the hardened image variant. It appends `-hardened` to the tag and defaults the image to `registry.traefik.io/traefik-hub`. Requires `hub.enabled` and Traefik Hub >= v3.21.0-ea. |

traefik/templates/requirements.yaml

@@ -227,7 +227,7 @@
     {{ fail "ERROR: hub.hardened is only available for Traefik Hub >= v3.21.0-ea, set image.tag accordingly." }}
   {{- end }}
 
-  {{- if and $.Values.hub.apimanagement.openApi.refreshInterval (semverCompare "<v3.21.0-0" $hubVersion) }}
+  {{- if and $.Values.hub.apimanagement.enabled $.Values.hub.apimanagement.openApi.refreshInterval (semverCompare "<v3.21.0-0" $hubVersion) }}
     {{ fail "ERROR: hub.apimanagement.openApi.refreshInterval is only available for Traefik Hub >= v3.21.0." }}
   {{- end }}
 

traefik/tests/hub-apigateway-config_test.yaml

@@ -160,9 +160,8 @@ tests:
         apimanagement:
           enabled: true
     asserts:
-      - notContains:
-          path: spec.template.spec.containers[0].args
-          content: "--hub.apiManagement.openApi.refreshInterval="
+      - notMatchRegexRaw:
+          pattern: "--hub\\.apiManagement\\.openApi\\.refreshInterval"
   - it: api management and ai gateway should not be enabled by default
     asserts:
       - notContains:

traefik/tests/requirements-config_test.yaml

@@ -895,6 +895,20 @@ tests:
             refreshInterval: "5m"
     asserts:
       - notFailedTemplate: {}
+  - it: should pass when apiManagement openApi refreshInterval is set but apiManagement is disabled
+    set:
+      image:
+        registry: "ghcr.io"
+        repository: "traefik/traefik-hub"
+        tag: v3.20.7
+      hub:
+        token: "xxx"
+        apimanagement:
+          enabled: false
+          openApi:
+            refreshInterval: "5m"
+    asserts:
+      - notFailedTemplate: {}
   - it: should fail when using pluginRegistry sources with unused plugin
     set:
       image:

traefik/values.schema.json

@@ -774,7 +774,7 @@
                             "type": "object",
                             "properties": {
                                 "refreshInterval": {
-                                    "description": "Interval to refresh the OpenAPI specification, as a Go duration. When empty, the provider default (`0`, disabled) applies.",
+                                    "description": "Interval to refresh the OpenAPI specification, as a Go duration. Must be at least `1m`. When empty, the Traefik Hub default (`1m`) applies.",
                                     "type": "string"
                                 },
                                 "validateRequestMethodAndPath": {

traefik/values.yaml

@@ -1327,7 +1327,7 @@ hub:  # @schema additionalProperties: false
     openApi:
       # -- When set to true, it will only accept paths and methods that are explicitly defined in its OpenAPI specification
       validateRequestMethodAndPath: false
-      # -- Interval to refresh the OpenAPI specification, as a Go duration. When empty, the provider default (`0`, disabled) applies.
+      # -- Interval to refresh the OpenAPI specification, as a Go duration. Must be at least `1m`. When empty, the Traefik Hub default (`1m`) applies.
       refreshInterval: ""
 
   mcpgateway: