v28.2.0

28.2.0 (2024-05-31)

⚠️ This release align to Kubernetes default (Always) for podSecurityContext.fsGroupChangePolicy. It was OnRootMismatch in previous release of this chart. It can easily be set (back) to OnRootMismatch if needed, see EXAMPLES.

Features

• ✨ simplify values and provide more examples (4eb71eb)
• add deletecollection right on secrets (fb69807)
• update traefik docker tag to v3.0.1 by @renovate in #1075

Bug Fixes

• IngressClass: provides annotation on IngressRoutes when it's enabled (f5de0c3)

New Contributors

• @jspdown made their first contribution in #1077

Full Changelog: v28.1.0...v28.2.0

v28.1.0

28.1.0 (2024-05-22)

Features

• Traefik Hub: add initial support for API Gateway (dc5c68d)
• Traefik Hub: use Traefik Proxy otlp config (a910db4)

Bug Fixes

• Traefik Hub: refine support (60d210d)
• Traefik Hub: do not deploy mutating webhook when enabling only API Gateway (cb2a98d)

Documentation

• example: Update Digital Ocean PROXY Protocol (9850319)
• 📚️ improve UPGRADING section (54ec665)

v28.1.0-beta.3

28.1.0-beta.3 (2024-05-03)

Features

• 🚀 add initial support for traefik-hub api gateway (dc5c68d)

Bug Fixes

• 🐛 refine Traefik Hub support (60d210d)

Documentation

• example: Update Digital Ocean PROXY Protocol (9850319)

v28.1.0-beta.2

28.1.0-beta.2 (2024-05-02)

Features

• 🚀 add initial support for traefik-hub api gateway (dc5c68d)

Bug Fixes

• 🐛 refine Traefik Hub support (60d210d)

Documentation

• example: Update Digital Ocean PROXY Protocol (9850319)

v28.1.0-beta.1

28.1.0-beta.1 (2024-04-30)

Features

• 🚀 add initial support for traefik-hub api gateway (dc5c68d)

v28.0.0

28.0.0 (2024-04-30)

⚠ BREAKING CHANGES

• 💥 initial support of Traefik Proxy v3
• See Migration guide from v2 to v3 and upgrading section of this chart on CRDs.

Features

• podtemplate: set GOMEMLIMIT, GOMAXPROCS when limits are defined (e4f2aa8)
• 💥 initial support of Traefik Proxy v3 (536059d)
• ✨ add support of experimental-v3.0 unstable version (579984c)
• ✨ fail gracefully when required port number is not set (f8be5e1)
• ports: add transport options (47e0f28)
• ability to override liveness and readiness probe paths (ea95df0)

Bug Fixes

• 🐛 logs filters on status codes (c204014)
• 🐛 only expose http3 port on service when TCP variant is exposed (2d6243d)

Styles

• 🎨 consistent capitalization on --entryPoints CLI flag (b1f6f96)

Documentation

• 📚️ improve EXAMPLES on acme resolver (2252aba)

New Contributors

• @matkam made their first contribution in #1041

v28.0.0-rc.1

28.0.0-rc.1 (2024-04-18)

Upgrade Notes

This is a major breaking upgrade. Migration guide have been applied on the chart.

It needs a Kubernetes v1.22 or higher.
All CRDs using API Group traefik.containo.us are not supported anymore in Traefik Proxy v3

CRDs needs to be upgraded: kubectl apply --server-side --force-conflicts -k https://github.com/traefik/traefik-helm-chart/traefik/crds/

After upgrade, CRDs with API Group traefik.containo.us can be removed:

kubectl delete crds \
  ingressroutes.traefik.containo.us \
  ingressroutetcps.traefik.containo.us \
  ingressrouteudps.traefik.containo.us \
  middlewares.traefik.containo.us \
  middlewaretcps.traefik.containo.us \
  serverstransports.traefik.containo.us \
  tlsoptions.traefik.containo.us \
  tlsstores.traefik.containo.us \
  traefikservices.traefik.containo.us

⚠ BREAKING CHANGES

• 💥 initial support of Traefik Proxy v3

Features

• podtemplate: set GOMEMLIMIT, GOMAXPROCS when limits are defined (e4f2aa8)
• 💥 initial support of Traefik Proxy v3 (536059d)
• ✨ fail gracefully when required port number is not set (f8be5e1)

Documentation

• 📚️ improve EXAMPLES on acme resolver (2252aba)

v27.0.2

27.0.2 (2024-04-12)

Upgrade Notes

This release comes with an important fix for traefik/traefik#10598 introduced in v2.11.1, see upstream release notes.

Features

• feat: ✨ update Traefik Proxy to v2.11.2 (#1034)

v27.0.1

27.0.1 (2024-04-11)

Upgrade notes

🚨 Traefik Proxy v2.11.1 introduces lingeringTimeout, see traefik/traefik#10569, that can be breaking for server-first protocols. This new setting can be set with additionalArguments.

Features

• release v27.0.1 with Traefik Proxy to v2.11.1 (4dadd66)

v27.0.0

27.0.0 (2024-04-04)

⚠ BREAKING CHANGES

• 💥 refactor custom services and port exposure (7e349d4)

Upgrade notes

Custom services and port exposure have been redesigned, requiring the following changes:

• if you were overriding port exposure behavior using the expose or exposeInternal flags, you should replace them with a service name to boolean mapping, i.e. replace this:

ports:
   web:
      port: 80
      expose: false
      exposeInternal: true

with this:

ports:
   web:
      port: 80
      expose:
         default: false
         internal: true

• if you were previously using the service.internal value, you should migrate the values to the service.additionalServices.internal value instead; this should yield the same results, but make sure to carefully check for any changes!

Features

• restrict access to secrets (8fbae97)

Bug Fixes

• rbac: do not create clusterrole for namespace deployment on Traefik v3 (d0f3442)
• remove null annotations on dashboard IngressRoute (606ab52)
• use hostIP also on entrypoint and healthChecks when set (82a3cab)

New Contributors

• @samox73 made their first contribution in #1016
• @ChandonPierre made their first contribution in #1012
• @andrzejpawcenis made their first contribution in #1021
• @jnonino made their first contribution in #1009
• @Zebradil made their first contribution in #992

Full Changelog: v26.1.0...v27.0.0