Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(helm)!: Update traefik ( 32.1.1 → 33.2.1 ) #542

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 31, 2024

This PR contains the following updates:

Package Update Change
traefik (source) major 32.1.1 -> 33.2.1

Release Notes

traefik/traefik-helm-chart (traefik)

v33.2.1

Compare Source

33.2.1 (2024-12-13)
Bug Fixes
  • Gateway API: CRDs should only be defined once (75f622f)

v33.2.0

Compare Source

Features
  • deps: update traefik docker tag to v3.2.2 (7076b78)
  • Gateway API: update sigs.k8s.io/gateway-api to v1.2.1 (f139bd9)
  • Traefik Proxy: 🎨 harmonize semverCompare calls (2aad522)
  • Traefik Proxy: add tracingparameters to helm chart values (b2c0628)
  • Traefik Proxy: support NativeLB option in GatewayAPI provider (9749d01)
Bug Fixes
  • Traefik Proxy: 🐛 abortOnPluginFailure not released yet (9ee6231)

New Contributors

v33.1.0

Compare Source

Upgrade Notes

Traefik Hub users should update the CRDs following UPGRADING instructions.

Features
  • deps: update traefik docker tag to v3.2.1 (8e991f3)
  • Traefik Hub: add APICatalogItem and ManagedSubscription support (6bfdd50)
  • Traefik Proxy: add abortOnPluginFailure field (b932958)
Bug Fixes
  • KubernetesCRD: 🐛 IngressClass should be readable even when kubernetesIngress is disabled (30012c0)
  • Traefik: support for entrypoint option on allowACMEByPass (18fcb8c)
  • 🐛 support specifying plugins storage (ae13d4b)
  • Traefik Hub: compatibility with Traefik Proxy v3.2 (40473e8)
  • Traefik Proxy: allowEmptyServices not disabled when set to false (4c2a65e)
Documentation
  • 📚️ fix typos in values and readme (d41869e)
  • Gateway API: detail upgrade instruction (218333c)
  • Plugins: 📝 detail behavior and expected values on plugin storage (9a5b396)

New Contributors

v33.0.0

Compare Source

Upgrade Notes

There are multiple breaking changes in this release:

  1. The default port of traefik entrypoint has changed from 9000 to 8080, just like the Traefik Proxy default port
    • You may have to update probes accordingly (or set this port back to 9000)
  2. publishedService is enabled by default on Ingress provider
    • You can disable it, if needed
  3. The POD_NAME and POD_NAMESPACE environment variables are now set by default, without values.
    • It is no longer necessary to add them in values and so, it can be removed from user values.
  4. In values, certResolvers specific syntax has been reworked to align with Traefik Proxy syntax.
    • PR #​1214 contains a complete before / after example on how to update values
  5. Traefik Proxy 3.2 supports Gateway API v1.2 (standard channel)
    • It is recommended to check that other software using Gateway API on your cluster are compatible
    • The Gateway API CRD upgrade may fail even with Flux, Argo or other CD tool
    • See release notes of gateway API v1.2 on how to upgrade their CRDs and avoid issues about invalid values on v1alpha2 version

The CRDs needs to be updated, as documented in the README.

ℹ️ A separate helm chart, just for CRDs, is being considered for a future release. See PR #​1123

⚠ BREAKING CHANGES
  • Env Variables: allow extending env without overwrite
  • certificateResolvers: 💥 🐛 use same syntax in Chart and in Traefik
  • Kubernetes Ingress: 💥 ✨ enable publishedService by default
  • Traefik: 💥 set 8080 as default port for traefik entrypoint
Features
  • Gateway API: ✨ add infrastructure in the values (2b28f7b)
  • Gateway API: ✨ standard install CRD v1.2.0 (4432f3c)
  • Traefik Proxy: update traefik docker tag to v3.2.0 (323e139)
  • Traefik Proxy: ✨ support Gateway API statusAddress (e7dcac1)
  • Traefik Proxy: CRDs for v3.2+ (d3c6d4c)
Bug Fixes
  • certificateResolvers: 💥 🐛 use same syntax in Chart and in Traefik (016822d)
  • Env Variables: allow extending env without overwrite (20f54b6)
  • Gateway API: 🐛 add missing required RBAC for v3.2 with experimental Channel (b872549)
  • schema: 🐛 targetPort can also be a string (12fee7e)
  • use correct children indentation for logs.access.filters (59073ef)
  • Kubernetes Ingress: 💥 ✨ enable publishedService by default (f7a96da)
  • Traefik: 💥 set 8080 as default port for traefik entrypoint (2b32ce7)
  • Traefik Hub: RBAC for distributedAcme (74abfee)
  • 🐛 http3 with internal service (7558e63)

New Contributors


Configuration

📅 Schedule: Branch creation - "* 0-4,22-23 * * 1-5,* * * * 0,6" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

github-actions bot commented Oct 31, 2024

--- kubernetes/apps/network/traefik/app Kustomization: flux-system/traefik HelmRelease: network/traefik

+++ kubernetes/apps/network/traefik/app Kustomization: flux-system/traefik HelmRelease: network/traefik

@@ -13,13 +13,13 @@

     spec:
       chart: traefik
       sourceRef:
         kind: HelmRepository
         name: traefik
         namespace: flux-system
-      version: 32.1.1
+      version: 33.2.1
   driftDetection:
     mode: enabled
   install:
     crds: CreateReplace
     remediation:
       retries: 3

Copy link

github-actions bot commented Oct 31, 2024

--- HelmRelease: network/traefik ClusterRole: network/traefik-network

+++ HelmRelease: network/traefik ClusterRole: network/traefik-network

@@ -76,41 +76,39 @@

 - apiGroups:
   - ''
   resources:
   - namespaces
   - secrets
   - services
+  - configmaps
   verbs:
   - get
   - list
   - watch
 - apiGroups:
-  - discovery.k8s.io
-  resources:
-  - endpointslices
-  verbs:
-  - list
-  - watch
-- apiGroups:
   - gateway.networking.k8s.io
   resources:
+  - backendtlspolicies
   - gatewayclasses
   - gateways
+  - grpcroutes
   - httproutes
   - referencegrants
   - tcproutes
   - tlsroutes
   verbs:
   - get
   - list
   - watch
 - apiGroups:
   - gateway.networking.k8s.io
   resources:
+  - backendtlspolicies/status
   - gatewayclasses/status
   - gateways/status
+  - grpcroutes/status
   - httproutes/status
   - tcproutes/status
   - tlsroutes/status
   verbs:
   - update
 
--- HelmRelease: network/traefik Deployment: network/traefik

+++ HelmRelease: network/traefik Deployment: network/traefik

@@ -30,43 +30,43 @@

     spec:
       serviceAccountName: traefik
       automountServiceAccountToken: true
       terminationGracePeriodSeconds: 60
       hostNetwork: false
       containers:
-      - image: docker.io/traefik:v3.1.6
+      - image: docker.io/traefik:v3.2.2
         imagePullPolicy: IfNotPresent
         name: traefik
         resources: null
         readinessProbe:
           httpGet:
             path: /ping
-            port: 9000
+            port: 8080
             scheme: HTTP
           failureThreshold: 1
           initialDelaySeconds: 2
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 2
         livenessProbe:
           httpGet:
             path: /ping
-            port: 9000
+            port: 8080
             scheme: HTTP
           failureThreshold: 3
           initialDelaySeconds: 2
           periodSeconds: 10
           successThreshold: 1
           timeoutSeconds: 2
         lifecycle: null
         ports:
         - name: metrics
           containerPort: 9100
           protocol: TCP
         - name: traefik
-          containerPort: 9000
+          containerPort: 8080
           protocol: TCP
         - name: websecure
           containerPort: 8443
           protocol: TCP
         - name: websecure-http3
           containerPort: 8443
@@ -81,24 +81,27 @@

         - name: data
           mountPath: /data
         - name: tmp
           mountPath: /tmp
         args:
         - --entryPoints.metrics.address=:9100/tcp
-        - --entryPoints.traefik.address=:9000/tcp
+        - --entryPoints.traefik.address=:8080/tcp
         - --entryPoints.websecure.address=:8443/tcp
         - --entryPoints.websecure.asDefault=true
         - --api.dashboard=true
         - --ping=true
         - --metrics.prometheus=true
         - --metrics.prometheus.entrypoint=metrics
         - --providers.kubernetescrd
         - --providers.kubernetescrd.allowEmptyServices=true
         - --providers.kubernetesingress
         - --providers.kubernetesingress.allowEmptyServices=true
+        - --providers.kubernetesingress.ingressendpoint.publishedservice=network/traefik
         - --providers.kubernetesgateway
+        - --providers.kubernetesgateway.statusaddress.service.name=traefik
+        - --providers.kubernetesgateway.statusaddress.service.namespace=network
         - --providers.kubernetesgateway.experimentalchannel=true
         - --entryPoints.websecure.http.tls=true
         - --entryPoints.websecure.http3
         - --log.format=json
         - --log.level=INFO
         - --accesslog=true

@jfroy jfroy force-pushed the main branch 10 times, most recently from 44a8b71 to e2e1ece Compare November 7, 2024 18:10
@renovate renovate bot force-pushed the renovate/traefik-33.x branch from bff3e18 to 0c2957f Compare November 9, 2024 10:15
@renovate renovate bot force-pushed the renovate/traefik-33.x branch from 0c2957f to 06e206d Compare November 10, 2024 03:52
@jfroy jfroy force-pushed the main branch 2 times, most recently from 05848cb to 4f6fd94 Compare November 10, 2024 04:00
@renovate renovate bot force-pushed the renovate/traefik-33.x branch from 06e206d to 48991af Compare November 10, 2024 04:00
@renovate renovate bot force-pushed the renovate/traefik-33.x branch from 48991af to 967ef5e Compare November 10, 2024 04:02
@renovate renovate bot force-pushed the renovate/traefik-33.x branch 2 times, most recently from 45cacab to e5c25e7 Compare November 10, 2024 04:05
@renovate renovate bot force-pushed the renovate/traefik-33.x branch from e5c25e7 to dc34a1b Compare November 10, 2024 04:16
@jfroy jfroy force-pushed the main branch 2 times, most recently from 8522a8e to 2c1a094 Compare November 13, 2024 18:46
@jfroy jfroy force-pushed the main branch 15 times, most recently from fc85124 to eb2fbea Compare November 26, 2024 18:22
@renovate renovate bot changed the title feat(helm)!: Update traefik ( 32.1.1 → 33.0.0 ) feat(helm)!: Update traefik ( 32.1.1 → 33.1.0 ) Dec 2, 2024
@renovate renovate bot force-pushed the renovate/traefik-33.x branch 2 times, most recently from af71ed5 to 86f55a7 Compare December 5, 2024 05:03
@renovate renovate bot changed the title feat(helm)!: Update traefik ( 32.1.1 → 33.1.0 ) feat(helm)!: Update traefik ( 32.1.1 → 33.2.0 ) Dec 11, 2024
@renovate renovate bot force-pushed the renovate/traefik-33.x branch from 86f55a7 to c47ef4e Compare December 11, 2024 15:20
@renovate renovate bot changed the title feat(helm)!: Update traefik ( 32.1.1 → 33.2.0 ) feat(helm)!: Update traefik ( 32.1.1 → 33.2.1 ) Dec 13, 2024
@renovate renovate bot force-pushed the renovate/traefik-33.x branch from c47ef4e to f755ac9 Compare December 13, 2024 18:52
@renovate renovate bot force-pushed the renovate/traefik-33.x branch from f755ac9 to eaa32b4 Compare December 13, 2024 20:08
@jfroy jfroy force-pushed the main branch 2 times, most recently from 6eb2c51 to 8af725e Compare December 16, 2024 09:56
@jfroy jfroy closed this Jan 9, 2025
@renovate renovate bot deleted the renovate/traefik-33.x branch January 9, 2025 05:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant