Skip to content

feat(helm)!: Update traefik ( 39.0.9 → 41.0.0 )#400

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/traefik-41.x
Open

feat(helm)!: Update traefik ( 39.0.9 → 41.0.0 )#400
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/traefik-41.x

Conversation

@renovate

@renovate renovate Bot commented Jun 20, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
traefik (source) major 39.0.941.0.0

Release Notes

traefik/traefik-helm-chart (traefik)

v41.0.0

Compare Source

Upgrade Notes

  1. Logs & access logs syntax: The chart now aligns its logging keys with the upstream Traefik syntax with PR #​1887.
    • logs.general is renamed to log (e.g. logs.general.levellog.level).
    • logs.access is renamed to accessLog (e.g. logs.access.formataccessLog.format).
    • Filter and field keys are now camelCased: filters.statuscodesfilters.statusCodes, filters.retryattemptsfilters.retryAttempts, filters.mindurationfilters.minDuration, and fields.*.defaultmodefields.*.defaultMode.
    • The accessLog.fields.general nesting level is removed: fields.general.defaultmodefields.defaultMode.Expand commentComment on line R27Resolved
  2. File provider content: providers.file.content is now an object ({}) instead of a string ("").

[!TIP]
Image registry and repository now default to null.
The chart now automatically resolves the full official image URI for both Traefik Proxy and Traefik Hub.

💥 BREAKING CHANGES

🚀 Features

🐛 Bug fixes

📦 Others

👌 Traefik version support

  • Traefik Proxy: v3.6.0 -> v3.7.5 (default)
  • Traefik Hub: v3.19.3 -> v3.20.4

v40.3.0

Compare Source

🚀 Features

🐛 Bug fixes

📦 Others

👌 Traefik version support

  • Traefik Proxy: v3.6.0 -> v3.7.4 (default)
  • Traefik Hub: v3.19.3 -> v3.20.4

v40.2.0

Compare Source

Upgrade guide

[!IMPORTANT]
This release is the first release without Gateway API v1.5.1 CRDs. The reason why it has been removed is detailed in #​1169.
See UPGRADING instructions and upstream migration guide.

🚀 Features

🐛 Bug fixes

📦 Others

👌 Traefik version support

  • Traefik Proxy: v3.6.0 -> v3.7.1 (default)
  • Traefik Hub: v3.19.3 -> v3.20.2

v40.1.0

Compare Source

🚀 Features

🐛 Bug fixes

📦 Others

👌 Traefik version support

  • Traefik Proxy: v3.6.0 -> v3.7.1 (default)
  • Traefik Hub: v3.19.3 -> v3.20.1

v40.0.1

Compare Source

🚀 Features

📦 Others

👌 Traefik version support

  • Traefik Proxy: v3.6.0 -> v3.7.0 (default)
  • Traefik Hub: v3.19.3 -> v3.20.1

v40.0.0

Compare Source

Upgrade Notes

[!IMPORTANT]
Traefik v3.7.0 comes with CRDs update. See UPGRADING instructions and upstream migration guide.

[!NOTE]
Gateway API CRDs will no longer be shipped with this chart in the next future major version. See #​1669 for more details.

  • The Service spec syntax in values.yaml is now aligned with Kubernetes syntax (cf. before / after example in the PR description)
  • providers.kubernetesIngressNginx has been renamed to providers.kubernetesIngressNGINX to align with Traefik proxy naming (cf. before / after example in the PR description)

👌 Traefik version support

  • Traefik Proxy: v3.6.0 -> v3.7.0 (default)
  • Traefik Hub: v3.19.3 -> v3.20.0

💥 BREAKING CHANGES

🚀 Features

🐛 Bug fixes

📦 Others


Configuration

📅 Schedule: (in timezone Europe/Lisbon)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

github-actions Bot commented Jun 20, 2026

Copy link
Copy Markdown
--- kubernetes/apps/network/traefik/public Kustomization: flux-system/traefik-public HelmRelease: network/traefik-public

+++ kubernetes/apps/network/traefik/public Kustomization: flux-system/traefik-public HelmRelease: network/traefik-public

@@ -14,13 +14,13 @@

       chart: traefik
       interval: 5m
       sourceRef:
         kind: HelmRepository
         name: traefik
         namespace: flux-system
-      version: 39.0.9
+      version: 41.0.0
   interval: 1h
   values:
     additionalArguments:
     - --serversTransport.insecureSkipVerify=true
     - --log.level=INFO
     api:
--- kubernetes/apps/network/traefik/private Kustomization: flux-system/traefik-private HelmRelease: network/traefik-private

+++ kubernetes/apps/network/traefik/private Kustomization: flux-system/traefik-private HelmRelease: network/traefik-private

@@ -14,13 +14,13 @@

       chart: traefik
       interval: 5m
       sourceRef:
         kind: HelmRepository
         name: traefik
         namespace: flux-system
-      version: 39.0.9
+      version: 41.0.0
   interval: 1h
   values:
     additionalArguments:
     - --serversTransport.insecureSkipVerify=true
     - --log.level=INFO
     api:

@github-actions

github-actions Bot commented Jun 20, 2026

Copy link
Copy Markdown
--- HelmRelease: network/traefik-private ClusterRole: network/traefik-private-network

+++ HelmRelease: network/traefik-private ClusterRole: network/traefik-private-network

@@ -81,16 +81,13 @@

   - list
   - watch
 - apiGroups:
   - ''
   resources:
   - namespaces
-  - secrets
-  - configmaps
   verbs:
-  - get
   - list
   - watch
 - apiGroups:
   - gateway.networking.k8s.io
   resources:
   - backendtlspolicies
--- HelmRelease: network/traefik-private Service: network/traefik-private

+++ HelmRelease: network/traefik-private Service: network/traefik-private

@@ -8,14 +8,14 @@

     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-private-network
     app.kubernetes.io/managed-by: Helm
   annotations:
     lbipam.cilium.io/ips: ..PLACEHOLDER_SECRET_TRAEFIK_PRIVATE_ADDR..
 spec:
+  externalTrafficPolicy: Cluster
   type: LoadBalancer
-  externalTrafficPolicy: Cluster
   selector:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-private-network
   ports:
   - port: 8080
     name: traefik
--- HelmRelease: network/traefik-private Deployment: network/traefik-private

+++ HelmRelease: network/traefik-private Deployment: network/traefik-private

@@ -77,13 +77,13 @@

         - name: POD_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
         - name: USER
           value: traefik
-        image: docker.io/traefik:v3.6.15
+        image: docker.io/traefik:v3.7.5
         imagePullPolicy: IfNotPresent
         lifecycle: null
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /ping
--- HelmRelease: network/traefik-public ClusterRole: network/traefik-public-network

+++ HelmRelease: network/traefik-public ClusterRole: network/traefik-public-network

@@ -81,16 +81,13 @@

   - list
   - watch
 - apiGroups:
   - ''
   resources:
   - namespaces
-  - secrets
-  - configmaps
   verbs:
-  - get
   - list
   - watch
 - apiGroups:
   - gateway.networking.k8s.io
   resources:
   - backendtlspolicies
--- HelmRelease: network/traefik-public Service: network/traefik-public

+++ HelmRelease: network/traefik-public Service: network/traefik-public

@@ -8,14 +8,14 @@

     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-public-network
     app.kubernetes.io/managed-by: Helm
   annotations:
     lbipam.cilium.io/ips: ..PLACEHOLDER_SECRET_TRAEFIK_PUBLIC_ADDR..
 spec:
+  externalTrafficPolicy: Cluster
   type: LoadBalancer
-  externalTrafficPolicy: Cluster
   selector:
     app.kubernetes.io/name: traefik
     app.kubernetes.io/instance: traefik-public-network
   ports:
   - port: 8080
     name: traefik
--- HelmRelease: network/traefik-public Deployment: network/traefik-public

+++ HelmRelease: network/traefik-public Deployment: network/traefik-public

@@ -77,13 +77,13 @@

         - name: POD_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
         - name: USER
           value: traefik
-        image: docker.io/traefik:v3.6.15
+        image: docker.io/traefik:v3.7.5
         imagePullPolicy: IfNotPresent
         lifecycle: null
         livenessProbe:
           failureThreshold: 3
           httpGet:
             path: /ping

@renovate renovate Bot force-pushed the renovate/traefik-41.x branch from 2cfef07 to ebf3b65 Compare June 22, 2026 18:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants