Update Helm release traefik to v28 - autoclosed #192

renovate · 2024-04-30T10:24:13Z

This PR contains the following updates:

Package	Update	Change
traefik (source)	major	`10.33.0` -> `28.3.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

traefik/traefik-helm-chart (traefik)

`v28.3.0`

Compare Source

Features

allow setting permanent on redirectTo (1b454e9)

Bug Fixes

Security: 🐛 🔒️ mount service account token on pod level ([db4f43f](https://github.com/traefik/traefik-helm-chart/commit/
Traefik Hub: remove namespace in mutating webhook (f8f2da2)
Traefik Hub: remove obsolete CRD (4fcec62)
🐛 namespaced rbac when kubernetesIngress provider is disabled (3bb41f7)
db4f43f))
🐛 add divisor: '1' to GOMAXPROCS and GOMEMLIMIT (9ccbee2)

New Contributors

@hawkesn made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1085
@berlincount made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1082

Full Changelog: traefik/traefik-helm-chart@v28.2.0...v28.3.0

`v28.2.0`

Compare Source

⚠️ This release align to Kubernetes default (Always) for podSecurityContext.fsGroupChangePolicy. It was OnRootMismatch in previous release of this chart. It can easily be set (back) to OnRootMismatch if needed, see EXAMPLES.

Features

✨ simplify values and provide more examples (4eb71eb)
add deletecollection right on secrets (fb69807)
update traefik docker tag to v3.0.1 by @renovate in https://github.com/traefik/traefik-helm-chart/pull/1075

Bug Fixes

IngressClass: provides annotation on IngressRoutes when it's enabled (f5de0c3)

New Contributors

@jspdown made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1077

Full Changelog: traefik/traefik-helm-chart@v28.1.0...v28.2.0

`v28.1.0`

Compare Source

Features

Traefik Hub: add initial support for API Gateway (dc5c68d)
Traefik Hub: use Traefik Proxy otlp config (a910db4)

Bug Fixes

Traefik Hub: refine support (60d210d)
Traefik Hub: do not deploy mutating webhook when enabling only API Gateway (cb2a98d)

Documentation

example: Update Digital Ocean PROXY Protocol (9850319)
📚️ improve UPGRADING section (54ec665)

`v28.0.0`

Compare Source

⚠ BREAKING CHANGES

💥 initial support of Traefik Proxy v3
See Migration guide from v2 to v3 and upgrading section of this chart on CRDs.

Features

podtemplate: set GOMEMLIMIT, GOMAXPROCS when limits are defined (e4f2aa8)
💥 initial support of Traefik Proxy v3 (536059d)
✨ add support of experimental-v3.0 unstable version (579984c)
✨ fail gracefully when required port number is not set (f8be5e1)
ports: add transport options (47e0f28)
ability to override liveness and readiness probe paths (ea95df0)

Bug Fixes

🐛 logs filters on status codes (c204014)
🐛 only expose http3 port on service when TCP variant is exposed (2d6243d)

Styles

🎨 consistent capitalization on --entryPoints CLI flag (b1f6f96)

Documentation

📚️ improve EXAMPLES on acme resolver (2252aba)

New Contributors

@matkam made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1041

`v27.0.2`

Compare Source

27.0.2 (2024-04-12)

Upgrade Notes

This release comes with an important fix for https://github.com/traefik/traefik/issues/10598 introduced in v2.11.1, see upstream release notes.

Features

feat: ✨ update Traefik Proxy to v2.11.2 (#1034)

`v27.0.1`

Compare Source

27.0.1 (2024-04-11)

Upgrade notes

🚨 Traefik Proxy v2.11.1 introduces lingeringTimeout, see https://github.com/traefik/traefik/pull/10569, that can be breaking for server-first protocols. This new setting can be set with additionalArguments.

Features

release v27.0.1 with Traefik Proxy to v2.11.1 (4dadd66)

`v27.0.0`

Compare Source

⚠ BREAKING CHANGES

💥 refactor custom services and port exposure (7e349d4)

Upgrade notes

Custom services and port exposure have been redesigned, requiring the following changes:

if you were overriding port exposure behavior using the expose or exposeInternal flags, you should replace them with a service name to boolean mapping, i.e. replace this:

ports:
   web:
      port: 80
      expose: false
      exposeInternal: true

with this:

ports:
   web:
      port: 80
      expose:
         default: false
         internal: true

if you were previously using the service.internal value, you should migrate the values to the service.additionalServices.internal value instead; this should yield the same results, but make sure to carefully check for any changes!

Features

restrict access to secrets (8fbae97)

Bug Fixes

rbac: do not create clusterrole for namespace deployment on Traefik v3 (d0f3442)
remove null annotations on dashboard IngressRoute (606ab52)
use hostIP also on entrypoint and healthChecks when set (82a3cab)

New Contributors

@samox73 made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1016
@ChandonPierre made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1012
@andrzejpawcenis made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1021
@jnonino made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/1009
@Zebradil made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/992

Full Changelog: traefik/traefik-helm-chart@v26.1.0...v27.0.0

`v26.1.0`

Compare Source

Important notice

ℹ️ CRDs has been updated in this release. On Traefik v2, there is no new or removed field, just description format update by upstream library.

⚠️ This Chart does not support Traefik v3 beta and rc versions.

Features

update traefik docker tag to v2.11.0 (843d1d7)
allow exposure of ports on internal service only (d9f4731)
create v1 Gateway and GatewayClass Version for Traefik v3 (85697f0)
set runtimeClassName on pod spec (c07d55c)

Bug Fixes

🐛 missing quote on experimental plugin args (e7ce1b4)
🐛 set runtimeClassName at pod level (3d76d3e)
update traefik v3 serverstransporttcps CRD (e404db9)

`v26.0.0`

Compare Source

Breaking Changes

This release can be breaking for:

Plugin user, see PR #961
PodAnnotation user, see PR #972

Features

💥 unify plugin import between traefik and this chart (cbddacb)
💥 deployment.podannotations support interpolation with tpl (d31b991)
add file provider (ddd6cee)
allow defining startupProbe (f061628)
allow update of namespace policy for websecure listener (2045843)

Bug Fixes

🐛 declare http3 udp port, with or without hostport (76dcb02)
🐛 improve confusing suggested value on openTelemetry.grpc (6a6efc1)

New Contributors

@demolitionmode made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/956
@ebuildy made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/937
@bennesp made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/967
@mysiki made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/961
@ivankatliarchuk made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/972

Full Changelog: traefik/traefik-helm-chart@v25.0.0...v26.0.0

`v25.0.0`

Compare Source

The two breaking changes are:

On redirectTo, ports.web.redirectTo=websecure => ports.web.redirectTo.port=websecure.
- More details in PR #934
On gateway, all values are now flattened to experimental.kubernetesGateway.
- More details in PR #927

Features

💥 rework and allow update of namespace policy for Gateway (b04d479)
💥 support http redirections and http challenges with cert-manager (8cf14c8)
✨ add healthcheck ingressRoute (0725e48)
Update traefik docker tag to v2.10.5 by @renovate in https://github.com/traefik/traefik-helm-chart/pull/930

Bug Fixes

🐛 remove old CRDs using traefik.containo.us (6484a40)
add missing separator in crds (ba67d9b)
add Prometheus scraping annotations only if serviceMonitor not created (6b2268f)
allow updateStrategy.rollingUpdate.maxUnavailable to be passed in as an int or string (0dcc834)
detect correctly v3 version when using sha in image.tag (1f043da)
disable ClusterRole and ClusterRoleBinding when not needed (14d4895)

Reverts

"fix: 🐛 remove old CRDs using traefik.containo.us" (bf75a5d)

Documentation

📚️ how to use this chart as a dependency (18c9d45)
fix typo in README (d1a2770)
Fix typo in the default values file (607b808)
remove email from apiToken in CloudFlare example (9b9f306)

New Contributors

@alfrunes made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/910
@hrivera-ntap made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/907
@devantler made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/915
@bmagic made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/916
@muandane made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/914
@renebarbosafl made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/927
@SebPlv made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/939
@BabisK made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/943

Full Changelog: traefik/traefik-helm-chart@v24.0.0...v25.0.0

`v24.0.0`

Compare Source

BREAKING CHANGES

⚠️ healthchecksPort and healthchecksScheme has moved from ports.traefik to deployment ⚠️

See Changelog or #898 for more details.

Features

✨ add support for traefik v3.0.0-beta3 and openTelemetry (80b5c06)
add pod_name as default in values.yaml (c42ec12)
disable allowPrivilegeEscalation (9443225)
update Traefik Proxy default version to v2.10.4 (https://github.com/traefik/traefik-helm-chart/pull/894)

Bug Fixes

🐛 renovate on test docker images (f2648b2)
🐛 traefik or metrics port can be disabled (3633974)
🐛 update traefik.containo.us CRDs to v2.10 (62d7a9b)
ingressclass name should be customizable (#864) (7f0a0fc)

New Contributors

@kupnu4x made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/864
@davhdavh made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/872

Full Changelog: traefik/traefik-helm-chart@v23.1.0...v23.2.0

`v23.1.0`

Compare Source

Features

✨ add a warning when labelSelector don't match (1085fc7)
➖ remove Traefik Hub v1 integration (1f29975)
add optional appProtocol field on Service ports (795478d)
allow specifying service loadBalancerClass (a9f023d)
common labels for all resources (71be847)

Bug Fixes

🐛 http3 support on traefik v3 (c29e3fd)
🐛 use k8s version for hpa api version (ab06c48)
use targetPort instead of port on ServiceMonitor (78cb8f1)

Documentation

Fix Let's Encrypt example (b68b6a6)

New Contributors

@project0 made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/842
@mhmxs made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/846
@justmike1 made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/837
@dddomin3 made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/848
@tomasbedrich made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/859
@baarde made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/858

Full Changelog: traefik/traefik-helm-chart@v23.0.1...v23.1.0

`v23.0.1`

Compare Source

23.0.1 (2023-04-28)

Bug Fixes

⬆️ Upgrade traefik Docker tag to v2.10.1 (b11f486)

`v23.0.0`

Compare Source

BREAKING CHANGE

BREAKING CHANGE: Traefik 2.10 comes with CRDs update on API Group by @mloiseleur in https://github.com/traefik/traefik-helm-chart/pull/840

=> ⚠️ You need to update CRDs ⚠️

Beware that Helm is not updating CRDs. More details here.
This chart will update RBAC to use those new CRDs.

Full Changelog: traefik/traefik-helm-chart@v22.3.0...v23.0.0

`v22.3.0`

Compare Source

BREAKING CHANGE

💥 New CRDs are needed for Traefik v2.10 by @mloiseleur in https://github.com/traefik/traefik-helm-chart/pull/834

=> ⚠️ You need to update CRDs ⚠️

Beware that Helm is not updating CRDs. More details here.
This chart will update RBAC to use those new CRDs.

Enhancements

⬆️ Upgrade traefik Docker tag to v2.10.0 by @renovate in https://github.com/traefik/traefik-helm-chart/pull/833

Bug Fixes

🐛 update rbac for both traefik.io and containo.us apigroups (#836) (0efbcb5)

Full Changelog: traefik/traefik-helm-chart@v22.2.0...v22.3.0

`v22.2.0`

Compare Source

Features

allow to set dnsConfig on pod template (fe25020)
override container port (480c17f)

Bug Fixes

🐛 annotations leaking between aliased subcharts (f6c7ee9)
indentation on TLSOption (2a9879a)

Tests

👷 Update unit tests tooling (da553ee)

New Contributors

@RouxAntoine made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/821
@romeuhcf made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/829
@TLPNull made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/830

Full Changelog: traefik/traefik-helm-chart@v22.1.0...v22.2.0

`v22.1.0`

Compare Source

Features

add additional labels to tlsoption (0244dde)

Documentation

📚️ improve example on HPA (d97b79b)

Misc

⬆️ Upgrade traefik Docker tag to v2.9.10 by @renovate in https://github.com/traefik/traefik-helm-chart/pull/818

New Contributors

@eddykaya made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/815

Full Changelog: traefik/traefik-helm-chart@v22.0.0...v22.1.0

`v22.0.0`

Compare Source

What's Changed

BREAKING CHANGE: image.registry introduction may break during the upgrade. If you are overriding image.repository, you may need to set image.registry. See PR #802. by @mloiseleur in https://github.com/traefik/traefik-helm-chart/pull/810

Full Changelog: traefik/traefik-helm-chart@v21.2.1...v22.0.0

`v21.2.1`

Compare Source

21.2.1 (2023-03-28)

What's Changed

📝 Clarify the need of an initContainer when enabling persistence for TLS Certificates by @mloiseleur in https://github.com/traefik/traefik-helm-chart/pull/798
📝 Merge and simplify TLS examples by @mloiseleur in https://github.com/traefik/traefik-helm-chart/pull/806
🎨 Introduce image.registry and add explicit default (it may impact custom image.repository) by @jnoordsij in https://github.com/traefik/traefik-helm-chart/pull/802
⬆️ Upgrade traefik Docker tag to v2.9.9 by @renovate in https://github.com/traefik/traefik-helm-chart/pull/807

Full Changelog: traefik/traefik-helm-chart@v21.2.0...v21.2.1

`v21.2.0`

Compare Source

What's Changed

✨ release 21.2.0 by @devaquila in https://github.com/traefik/traefik-helm-chart/pull/805
⬆️ Upgrade traefik Docker tag to v2.9.8 by @renovate in https://github.com/traefik/traefik-helm-chart/pull/797
Separate UDP hostPort for HTTP/3 by @jilleJr in https://github.com/traefik/traefik-helm-chart/pull/799
🚨 Fail when enabling PSP on Kubernetes v1.25+ by @mloiseleur in https://github.com/traefik/traefik-helm-chart/pull/801
doc: Improve upgrade command by @mloiseleur in https://github.com/traefik/traefik-helm-chart/pull/803

New Contributors

@jilleJr made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/799
@devaquila made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/805

Full Changelog: traefik/traefik-helm-chart@v21.1.0...v21.2.0

`v21.1.0`

Compare Source

Features

Add volumeName to PersistentVolumeClaim (#792) (f5f145e)
Allow setting TLS options on dashboard IngressRoute by @jnoordsij in https://github.com/traefik/traefik-helm-chart/pull/789

Bug Fixes

traefik image name for renovate (a34f305)

What's Changed

Update TESTING.md to account for changes in behavior by @jnoordsij in https://github.com/traefik/traefik-helm-chart/pull/790
⬆️ Upgrade traefik Docker tag to v2.9.7 by @renovate in https://github.com/traefik/traefik-helm-chart/pull/795
✨ release 21.1.0 by @charlie-haley in https://github.com/traefik/traefik-helm-chart/pull/796

New Contributors

@TBurda made their first contribution in https://github.com/traefik/traefik-helm-chart/pull/792

Full Changelog: traefik/traefik-helm-chart@v21.0.0...v21.1.0

`v21.0.0`

Compare Source

Bug Fixes

service-metrics: invert prometheus svc & fullname length checking (4d3c8ae)
allowExternalNameServices for kubernetes ingress when hub enabled (#772) (cd039c5)
🐛 Disabling dashboard ingressroute should delete it by @mloiseleur in https://github.com/traefik/traefik-helm-chart/pull/785