- acme
* Add options to control ACME propagation checks (#11241 by ldez)
- api
* Add support dump API endpoint (#11328 by mmatur)
- http
* Set Host header in HTTP provider request (#11237 by nikonhub)
- k8s/crd, k8s
* Make the IngressRoute kind optional (#11177 by skirtan1)
- k8s/ingress, sticky-session, k8s/crd,k8s
* Support serving endpoints (#11121 by BZValoche)
* Fix fenced server status computation (#11361 by kevinpollet)
- logs, accesslogs
* OpenTelemetry Logs and Access Logs (#11319 by rtribotte)
* Add experimental flag for OTLP logs integration (#11335 by kevinpollet)
- metrics, tracing, accesslogs
* Manage observability at entrypoint and router level (#11308 by rtribotte)
- middleware, authentication
* Add an option to preserve the ForwardAuth Server Location header (#11318 by Nelwhix)
* Only calculate basic auth hashes once for concurrent requests (#11143 by michelheusschen)
* Send request body to authorization server for forward auth (#11097 by kyo-ke)
- plugins
* Add AbortOnPluginFailure option to abort startup on plugin load failure (#11228 by bmagic)
- sticky-session
* Configurable path for sticky cookies (#11165 by IIpragmaII)
- webui, api
* Configurable API & Dashboard base path (#11250 by rtribotte)
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/traefik?expand=0&rev=65
- Version 3.2.1 changes
- acme
* Update go-acme/lego to v4.20.2 (gh#traefik/traefik#11263 by ldez)
- logs
* Change level of peeking first byte error log to DEBUG for Postgres
(gh#traefik/traefik#11270 by rtribotte)
- k8s/ingress,k8s
* Fix HostRegexp config for rule syntax v2 (gh#traefik/traefik#11288 by kevinpollet)
- logs Change level of peeking first byte error log to DEBUG for Postgres
(gh#traefik/traefik#11270 by rtribotte, gh#traefik/traefik#11254 by rtribotte)
- service
* Fix internal handlers ServiceBuilder composition (gh#traefik/traefik#11281 by juliens)
- service,fastproxy Fix case problem for websocket upgrade
(gh#traefik/traefik#11246 by juliens)
- server
* Change level of peeking first byte error log to DEBUG (gh#traefik/traefik#11254 by rtribotte)
* Apply keepalive config to h2c entrypoints (gh#traefik/traefik#11276 by davefu113)
- middleware,server
* Drop untrusted X-Forwarded-Prefix header (gh#traefik/traefik#11253 by rtribotte)
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/traefik?expand=0&rev=57
- Update from 3.1.6 to 3.2.0
- Important: please read the migration guide when migrating to version 3.2.0
- Version 3.2.0 changes
- acme
* Remove same email requirement for certresolvers (#11019 by Emrio)
* Add support for custom CA certificates by certificate resolver (#10816 by ldez)
* Add 30 day certificatesDuration step (#10970 by luker983)
- docker
* Support HTTP BasicAuth for docker and swarm endpoint (#10776 by 985492783)
- k8s, k8s/gatewayapi
* Add supported features to the Gateway API GatewayClass status (#11056 by rtribotte)
* Update sigs.k8s.io/gateway-api to v1.2.0-rc1 (#11124 by rtribotte)
* Add support for backend protocol selection in HTTP and GRPC routes (#11051 by rtribotte)
* Improve Kubernetes GatewayAPI TCPRoute and TLSRoute support (#11042 by rtribotte)
* Support HTTPRoute destination port matching (#11134 by kevinpollet)
* Bump sigs.k8s.io/gateway-api to v1.2.0-rc2 (#11131 by kevinpollet)
* Add support for Gateway API BackendTLSPolicies (#11009 by rtribotte)
* Support NativeLB option in GatewayAPI provider (#11147 by rtribotte)
* Support ResponseHeaderModifier filter (#10987 by kevinpollet)
* Support GRPC routes (#10975 by kevinpollet)
* Bump sigs.k8s.io/gateway-api to v1.2.0 (#11167 by rtribotte)
* Ensuring Gateway API reflected Traefik resource name unicity (#11222 by rtribotte)
* Preserve GRPCRoute filters order (#11199 by kevinpollet)
* Support http and https appProtocol for Kubernetes Service (#11176 by WillDaSilva)
* Avoid updating Accepted status for routes matching no Gateways (#11170 by rtribotte)
* Do not update gateway status when not selected by a gateway class (#11169 by kevinpollet)
* Document nativeLBByDefault annotation on Kubernetes Gateway provider (#11209 by mloiseleur)
- k8s/crd, k8s
* Detail CRD update with v3.2 in the migration guide (#11164 by mloiseleur)
- k8s/gatewayapi
* Add missing RBAC in the migration guide (#11189 by mloiseleur)
- k8s
* Fix instructions for downloading CRDs of Gateway API v1.2 (#11191 by mloiseleur)
- metrics, otel
* Allow setting service.name for OTLP metrics (#10917 by cmartell-at-ocp)
- middleware
* Record trace id and EntryPoint span id into access log (#10921 by weijiany)
* Support LogUserHeader with forwardAuth middleware (#10833 by GaleHuang)
* Add encodings option to the compression middleware (#10943 by wollomatic)
* Add support for ipv6 subnet in ipStrategy (#9747 by michal-kralik)
- nomad
* Support for watching instead of polling Nomad (#10997 by deverton-godaddy)
- server
* Introduce a fast proxy mode to improve HTTP/1.1 performances with backends (#11122 by kevinpollet)
* Configurable max request header size (#10995 by lucasrod16)
- service
* Add mirrorBody option to HTTP mirroring (#11032 by MatteoPaier)
* Add an option to preserve server path (#11192 by mmatur)
* Detect and drop broken conns in the fastproxy pool (#11212 by kevinpollet)
- Merge branch v3.1 into v3.2 (#11219 by kevinpollet)
- Merge branch v3.1 into master (#11153 by kevinpollet)
- Version 3.1.7 changes
- k8s
* Preserve HTTPRoute filters order (#11198 by kevinpollet)
- Merge branch v2.11 into v3.1
OBS-URL: https://build.opensuse.org/request/show/1219806
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/traefik?expand=0&rev=24
file can be written in /etc/traefik/acme.json
- Update to version 3.1.1
- Bug fixes:
* grpc: Bump google.golang.org/grpc to v1.64.1
* k8s/gatewayapi: Do not update route status when nothing changed
* metrics
- Fix grafana dashboard to work with scrape interval greater than 15s
- Update open connections gauge with connections count
- Use ServiceName in traefik_service_server_up metric
* docker: Update to github.com/docker/docker v27.1.1
* webui: Upgrade webui dependencies - fixes boo#1224308 and CVE-2024-4068
- Run traefik as traefik user, fixes boo#1227226
- Added ACME confiuration template
- Update to version 3.1.1
- Bug fixes:
* k8s/gatewayapi
- Do not update route status when nothing changed
* metrics
- Fix grafana dashboard to work with scrape interval greater than 15s
- Update open connections gauge with connections count
- Use ServiceName in traefik_service_server_up metric
- Updates
- Fix for CVE-2024-6104, boo#1227059
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/traefik?expand=0&rev=47
* Updated libraries
- Update to version 3.0.2
* Bug fixes:
[logs] Bump OTel dependencies (#10763 by DrFaust92)
[logs] Append to log file if it exists (#10756 by lbenguigui)
[metrics] Fix service name label_replace in Grafana (#10758 by xdavidwu)
[middleware] Forward the correct status code when compression is disabled within the Brotli handler (#10780 by rtribotte)
[middleware] Support Accept-Encoding header weights with Compress middleware (#10777 by ldez)
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/traefik?expand=0&rev=39
- Update to version 3.0.1
* CVEs:
* CVE-2024-24788 (bsc#1224018): A malformed DNS message in response to a
query can cause the Lookup functions to get stuck in an infinite loop.
* Bug fixes:
* [k8s/ingress] Fix rule syntax version for all internal routers
(gh#traefik/traefik#10689 by HalloTschuess)
* [metrics,tracing] Allow empty configuration for OpenTelemetry metrics
and tracing (gh#traefik/traefik#10729 by rtribotte)
* [provider,tls] Bump tscert dependency to 28a91b69a046
(gh#traefik/traefik#10668 by kevinpollet)
* [rules,tcp] Fix the rule syntax mechanism for TCP
(gh#traefik/traefik#10680 by lbenguigui)
* [tls,server] Remove deadlines when handling PostgreSQL connections
(gh#traefik/traefik#10675 by rtribotte)
* [webui] Add support for IP White list
(gh#traefik/traefik#10740 by davidbaptista)
- Packaging:
* Use Traefik's src.tar.gz files containing a pre-built frontend to simplify the packaging process
* Fixes bsc#1224308 and bsc#1224384
- Removed allow-node-21.patch and prepare-sources.sh script
- Moved configuraton from .toml to .yml config
- Update to version 3.0.0
* Announcment: https://traefik.io/blog/announcing-traefik-proxy-v3-rc/
* added support for popular, emerging technologies—WebAssembly (Wasm),
OpenTelemetry, and Kubernetes Gateway API
* revamped some key parts of the routing rules
* added support for some leading edge technologies like HTTP/3, SPIFFE, and Tailscale
* Migration guide: https://doc.traefik.io/traefik/v3.0/migration/v2-to-v3/
* Details: https://github.com/traefik/traefik/releases/tag/v3.0.0
OBS-URL: https://build.opensuse.org/request/show/1176684
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/traefik?expand=0&rev=14
- Update to version 3.0.1
* CVEs:
* CVE-2024-24788 (bsc#1224018): A malformed DNS message in response to a
query can cause the Lookup functions to get stuck in an infinite loop.
* Bug fixes:
* [k8s/ingress] Fix rule syntax version for all internal routers
(gh#traefik/traefik#10689 by HalloTschuess)
* [metrics,tracing] Allow empty configuration for OpenTelemetry metrics
and tracing (gh#traefik/traefik#10729 by rtribotte)
* [provider,tls] Bump tscert dependency to 28a91b69a046
(gh#traefik/traefik#10668 by kevinpollet)
* [rules,tcp] Fix the rule syntax mechanism for TCP
(gh#traefik/traefik#10680 by lbenguigui)
* [tls,server] Remove deadlines when handling PostgreSQL connections
(gh#traefik/traefik#10675 by rtribotte)
* [webui] Add support for IP White list
(gh#traefik/traefik#10740 by davidbaptista)
* Additional fixes: bnc#1224308 and bnc#1224384
- New packaging:
Traefik's src.tar.gz files containing a pre-built frontend are now
used for packaging with simplifies the packaging process a lot.
* Set the version in the spec-file
* download sources with "osc service localrun download_files"
* create go vendor-package using "osc service manualrun"
- Removed allow-node-21.patch and prepare-sources.sh script
OBS-URL: https://build.opensuse.org/request/show/1176506
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/traefik?expand=0&rev=34
- Added allow-node-21.patch to allow building with nodejs21, too
- Update to version 2.11.2
Important: Read the migration guide at https://doc.traefik.io/traefik/migration/v2/#v2112
* CVE's:
* GHSA-7f4j-64p6-5h5v (related to CVE-2023-45288)
* CVE-2024-28869
* Bug fixes:
* [server] Revert LingeringTimeout and change default value for ReadTimeout
* [server] Set default ReadTimeout value to 60s
- Removed traefik-fix-int-overflow-with-go-generate-10452.patch
- Update to version 2.11.1:
* Bug fixes:
* [acme,tls] Enforce handling of ACME-TLS/1 challenges
* [acme] Update go-acme/lego to v4.16.1
* [acme] Close created file in ACME local store CheckFile func
* [docker,http3] Update to quic-go v0.42.0 and docker/cli v24.0.9
* [docker,marathon,rancher,ecs,tls,nomad] Allow to configure TLSStore default generated certificate with labels
* [ecs] Adjust ECS network interface detection logi
* [logs,tls] Fix log when default TLSStore and TLSOptions are defined multiple times
* [middleware] Allow empty replacement with ReplacePathRegex middleware
* [plugins] Update Yaegi to v0.16.1
* [provider,rules] Don't allow routers higher than internal ones
* [rules] Reserve priority range for internal router
* [server,tcp] Introduce Lingering Timeout
* [tcp] Enforce failure for TCP HostSNI with hostname
* [tracing] Bump Elastic APM to v2.4.8
* [webui] Fix dashboard exposition through a router
* [webui] Display IPAllowlist middleware configuration in dashboard
* [webui] Make text more readable in dark mode
* [webui] Migrate to Quasar 2.x and Vue.js 3.x
* [webui] Add a horizontal scroll for the mobile view
OBS-URL: https://build.opensuse.org/request/show/1171807
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/traefik?expand=0&rev=30
- configuration changes:
* Enhanced default configuration file, including configs for http3 support.
* Docker configuration has been disabled per default, file provider has been enabled.
The directory for the file provider has been set to /etc/traefik/conf.d
* Prepared directories for logging in /var/log/traefik
* Enhanced default configuration file, including configs for http3 support. Settings
are disabled per default.
- packaging general:
* Use standard source-download feature, modified _service file and removed _servicedata
* packagers can invoke `prepare-sources.sh` to doenload sources and prepare go-packages
as well as node_modules for the built process.
- frontend packaging:
* The frontend will now be packaged on OBS to have reproduceable builds.
- Go packaging:
* Added upstream patch traefik-fix-int-overflow-with-go-generate-10452.patch to
allow packaging on 32bit architectures gh#traefik/traefik#10451
* Enabled CGO because there is no cross compilation needed in OSB (we build
packages for every distribution/architecture seperately). PIE can not be used
with CGO enabled for most architectures and is reported as failure sinc go 1.22.
See https://github.com/golang/go/issues/64875
* Don't use pie-buildmode for ppc64 and s390x architectures
- Update to version 2.11.0:
* Enhancements:
* [middleware] Deprecate IPWhiteList middleware in favor of IPAllowList
* [redis] Add Redis Sentinel support
* [server] Add KeepAliveMaxTime and KeepAliveMaxRequests features to entrypoints
* [sticky-session] Hash WRR sticky cookies
* Bug fixes:
* [acme] Update go-acme/lego to v4.15.0
* [authentication] Fix NTLM and Kerberos
* [file] Fix file watcher
* [file] Update github.com/fsnotify/fsnotify to v1.7.0
* [http3] Update quic-go to v0.40.1
* [middleware,tcp] Add missing TCP IPAllowList middleware constructor
* [nomad] Update the Nomad API dependency to v1.7.2
* [server] Fix ReadHeaderTimeout for PROXY protocol
* [webui] Fixes the Header Button
* [webui] Fix URL encode resource's id before calling API endpoints
OBS-URL: https://build.opensuse.org/request/show/1155081
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/traefik?expand=0&rev=27
