v32.1.0

32.1.0 (2024-10-15)

⚠ BREAKING CHANGES

• 💥 refactor custom services and port exposure
• 💥 initial support of Traefik Proxy v3
• dashboard: dashboard IngressRoute should be disabled by default
• rbac: nodes API permissions for Traefik v3.1+
• prometheus operator settings
• providers: improve kubernetesGateway and Gateway API support
• Gateway API: revamp Gateway implementation
• 🐛 set allowEmptyServices to true by default
• Env Variables: allow extending env without overwrite

Features

• 💥 initial support of Traefik Proxy v3 (536059d)
• 💥 refactor custom services and port exposure (7e349d4)
• 💥 rework and allow update of namespace policy for Gateway (b04d479)
• 💥 support http redirections and http challenges with cert-manager (8cf14c8)
• 💥 unify plugin import between traefik and this chart (cbddacb)
• :release: v30.0.1 (ab2db23)
• 🚀 add initial support for traefik-hub api gateway (dc5c68d)
• ✨ add AllowACMEByPass and improve schema/doc on ports values (458cab9)
• ✨ add healthcheck ingressRoute (0725e48)
• ✨ add support of experimental-v3.0 unstable version (579984c)
• ✨ display release name and image full path in installation notes (b77d53d)
• ✨ fail gracefully when required port number is not set (f8be5e1)
• ✨ input validation using schema (cf703c7)
• ✨ migrate to endpointslices rbac (0449b0b)
• ✨ publish chart on OCI registry (deaddf5)
• ✨ rework namespaced RBAC with disableClusterScopeResources (5b54cf7)
• ✨ simplify values and provide more examples (4eb71eb)
• ✨ update CRDs & RBAC for Traefik Proxy (228c4e4)
• 💥 deployment.podannotations support interpolation with tpl (d31b991)
• ability to override liveness and readiness probe paths (ea95df0)
• add deletecollection right on secrets (fb69807)
• add file provider (ddd6cee)
• allow defining startupProbe (f061628)
• allow exposure of ports on internal service only (d9f4731)
• allow setting permanent on redirectTo (1b454e9)
• allow to set hostAliases for traefik pod (42e5745)
• allow update of namespace policy for websecure listener (2045843)
• create v1 Gateway and GatewayClass Version for Traefik v3 (85697f0)
• handle log filePath and noColor (51fc564)
• restrict access to secrets (8fbae97)
• set runtimeClassName on pod spec (c07d55c)
• dashboard: dashboard IngressRoute should be disabled by default (d9b856a)
• deps: update traefik docker tag to v3.1.3 (1ecf803)
• deps: update traefik docker tag to v3.1.4 (51b46ba)
• deps: update traefik docker tag to v3.1.5 (3b1860c)
• deps: update traefik docker tag to v3.1.6 (37f9f12)
• Gateway API: ✨ add infrastructure in the values (2b28f7b)
• podtemplate: set GOMEMLIMIT, GOMAXPROCS when limits are defined (e4f2aa8)
• ports: add transport options (47e0f28)
• providers: add nativeLBByDefault support (e75a85c)
• providers: improve kubernetesGateway and Gateway API support (2eb640a)
• Traefik Hub: 🍻 add E2E tests on RBACs change (dd3bee0)
• Traefik Hub: add APIPlans and APIBundles CRDs (87d206e)
• Traefik Hub: update CRDs to v1.7.0 (aa18d47)
• Traefik Hub: use Traefik Proxy otlp config (a910db4)
• workflow: add oci push (aa3022a)
• add new webhooks and removes unnecessary ones (d7c3622)
• use single ingressRoute template (9240475)
• Traefik Proxy: update rbac following v3.2 migration guide (cae906e)

Bug Fixes

• allow multiples values in the secretResourceNames slice (24978e8)
• 🐛 set disableIngressClassLookup until 3.1.4 (7c81ff5)
• 🐛 add divisor: '1' to GOMAXPROCS and GOMEMLIMIT (9ccbee2)
• 🐛 declare http3 udp port, with or without hostport (76dcb02)
• 🐛 improve confusing suggested value on openTelemetry.grpc (6a6efc1)
• 🐛 improve error message on additional service without ports (d4cab24)
• 🐛 ingressroute default name (a494617)
• 🐛 logs filters on status codes (c204014)
• 🐛 missing quote on experimental plugin args (e7ce1b4)
• 🐛 namespaced rbac when kubernetesIngress provider is disabled (3bb41f7)
• 🐛 only expose http3 port on service when TCP variant is exposed (2d6243d)
• 🐛 refine Traefik Hub support (60d210d)
• 🐛 remove old CRDs using traefik.containo.us (6484a40)
• 🐛 set runtimeClassName at pod level (3d76d3e)
• add missing separator in crds (ba67d9b)
• add Prometheus scraping annotations only if serviceMonitor not created (6b2268f)
• allow updateStrategy.rollingUpdate.maxUnavailable to be passed in as an int or string (0dcc834)
• can't set gateway name (13d302d)
• detect correctly v3 version when using sha in image.tag (1f043da)
• disable ClusterRole and ClusterRoleBinding when not needed (14d4895)
• update traefik v3 serverstransporttcps CRD (e404db9)
• Env Variables: allow extending env without overwrite (20f54b6)
• Gateway API: 🐛 add missing required RBAC for v3.2 with experimental Channel (b872549)
• Gateway API: use Standard channel by default (ccdb66b)
• Gateway API: wildcard support in hostname (93d1717)
• IngressClass: provides annotation on IngressRoutes when it's enabled (f5de0c3)
• rbac: do not create clusterrole for namespace deployment on Traefik v3 (d0f3442)
• namespaced RBACs hub api gateway (50c24e5)
• prometheus operator settings (7d3a90d)
• RBACs for hub and disabled namespaced RBACs (0827106)
• remove null annotations on dashboard IngressRoute (606ab52)
• remove version in OCI documentation (d613258)
• semverCompare failing on some legitimate tags (143b96f)
• use hostIP also on entrypoint and healthChecks when set (82a3cab)
• dashboard: Only set ingressClass annotation when kubernetesCRD provider is listening for it (f142f6c)
• Gateway API: provide expected roles when using namespaced RBAC (abc6310)
• Gateway API: revamp Gateway implementation (5f2705d)
• HTTP3: split udp and tcp Service when service.single is false (24acadf)
• rbac: nodes API permissions for Traefik v3.1+ (647439d)
• schema: 🐛 targetPort can also be a string (12fee7e)
• security: 🐛 🔒️ mount service account token on pod level (db4f43f)
• Traefik Hub: do not deploy mutating webhook when enabling only API Gateway (cb2a98d)
• Traefik Hub: missing RBACs for Traefik Hub (ed80c4c)
• Traefik Hub: RBACs missing with API Gateway (747f833)
• Traefik Hub: remove namespace in mutating webhook (f8f2da2)
• Traefik Hub: remove obsolete CRD (4fcec62)
• Traefik Hub: support new RBACs for upcoming traefik hub release (0e81ea2)
• 🐛 set allowEmptyServices to true by default (2324766)
• 🐛 update CRD to v3.1 (2dc2253)
• disable default HTTPS listener for gateway (f90f16e)
• Traefik Hub: update CRDs to v1.5.0 (ee3537a)
• 🐛 updateStrategy behavior (6c1c8c3)

Reverts

• "fix: 🐛 remove old CRDs using traefik.containo.us" (bf75a5d)

Styles

• 🎨 consistent capitalization on --entryPoints CLI flag (b1f6f96)

Documentation

• 📚️ how to use this chart as a dependency (18c9d45)
• 📚️ improve EXAMPLES on acme resolver (2252aba)
• 📚️ improve UPGRADING section (54ec665)
• fix typo in README (d1a2770)
• Fix typo in the default values file (607b808)
• fix typos and broken link (e43afd4)
• remove email from apiToken in CloudFlare example (9b9f306)
• example: Update Digital Ocean PROXY Protocol (9850319)
• EXAMPLES: 📚️ improve wording on dashboard access without exposing it (2b03ee8)