chore(deps): update helm release traefik to v42 #411

2026-10-15T16:02:13Z

renovate-bot commented

2026-10-15 16:02:13 +00:00

This PR contains the following updates:

Package	Update	Change
traefik (source)	major	`41.7.1` -> `42.0.0`

Release Notes

traefik/traefik-helm-chart (traefik)

`v42.0.0`

Compare Source

There are 3 breaking changes in this release

Upgrade Notes

Kubernetes v1.30+: The chart now requires Kubernetes v1.30 or higher (https://github.com/traefik/traefik-helm-chart/pull/2030).
Traefik Hub Secret RBAC: Write verbs on Secrets (create, update, delete) are no longer granted cluster-wide.
- A Role now grants them in the release namespace only, where Traefik Hub writes its Secrets (https://github.com/traefik/traefik-helm-chart/pull/2028)
Transparency logs witnesses: (https://github.com/traefik/traefik-helm-chart/pull/2018):
- hub.transparencyLogs.witnessGroup.witnesses now defaults to null and threshold must be at least 1.
- Setting threshold, timeout or failOpen without any witness now fails.

[!NOTE]
With hub.token, the chart now deploys a cluster-scoped ValidatingAdmissionPolicy that only allows Traefik Hub to write Opaque and kubernetes.io/tls Secrets.
Set hub.restrictSecretTypes: false if the installer cannot create cluster-scoped resources.

💥 BREAKING CHANGES

fix(tlogs)!: empty witness config #2018 by @LBF38
feat(chart)!: require Kubernetes v1.30 or higher #2030 by @mloiseleur
fix(rbac)!: 🐛 scope Traefik Hub secret write permissions to release namespace #2028 by @mloiseleur

🚀 Features

feat(hub): 🚀 support traefik hub v3.20.16 and v3.21.3 #2032 by @mloiseleur
feat(hub): restrict Secret types written by Traefik Hub #2031 by @mloiseleur

🐛 Bug fixes

fix(examples): fix outdated value schema used in additionalServices example #2023 by @jnoordsij

📦 Others

chore(deps): update github actions #2024 by @renovate-with-github-actions[bot]
chore(deps): update quay.io/helmpack/chart-testing docker tag to v3.15.0 #2025 by @renovate-with-github-actions[bot]
docs(agents): document Traefik Hub version bump #2033 by @mloiseleur
docs(examples): add Traefik Hub Gateway with the Traefik MCP server as a sidecar #2007 by @emilevauge
chore(release): 🚀 publish 42.0.0 #2034 by @mloiseleur

👌 Traefik version support

Traefik Proxy: v3.6.0 -> v3.7.14 (default)
Traefik Hub: v3.19.3 -> v3.21.3

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [traefik](https://traefik.io/) ([source](https://github.com/traefik/traefik-helm-chart)) | major | `41.7.1` -> `42.0.0` | --- ### Release Notes <details> <summary>traefik/traefik-helm-chart (traefik)</summary> ### [`v42.0.0`](https://github.com/traefik/traefik-helm-chart/releases/tag/v42.0.0) [Compare Source](https://github.com/traefik/traefik-helm-chart/compare/v41.7.1...v42.0.0) There are 3 breaking changes in this release **Upgrade Notes** 1. **Kubernetes v1.30+**: The chart now requires Kubernetes v1.30 or higher (https://github.com/traefik/traefik-helm-chart/pull/2030). 2. **Traefik Hub Secret RBAC**: Write verbs on Secrets (`create`, `update`, `delete`) are no longer granted cluster-wide. - A `Role` now grants them in the release namespace only, where Traefik Hub writes its Secrets (https://github.com/traefik/traefik-helm-chart/pull/2028) 3. **Transparency logs witnesses**: (https://github.com/traefik/traefik-helm-chart/pull/2018): - `hub.transparencyLogs.witnessGroup.witnesses` now defaults to `null` and `threshold` must be at least `1`. - Setting `threshold`, `timeout` or `failOpen` without any witness now fails. > \[!NOTE] > With `hub.token`, the chart now deploys a cluster-scoped `ValidatingAdmissionPolicy` that only allows Traefik Hub to write `Opaque` and `kubernetes.io/tls` Secrets. > Set `hub.restrictSecretTypes: false` if the installer cannot create cluster-scoped resources. #### :boom: BREAKING CHANGES - fix(tlogs)!: empty witness config [#2018](https://github.com/traefik/traefik-helm-chart/issues/2018) by [@LBF38](https://github.com/LBF38) - feat(chart)!: require Kubernetes v1.30 or higher [#2030](https://github.com/traefik/traefik-helm-chart/issues/2030) by [@mloiseleur](https://github.com/mloiseleur) - fix(rbac)!: 🐛 scope Traefik Hub secret write permissions to release namespace [#2028](https://github.com/traefik/traefik-helm-chart/issues/2028) by [@mloiseleur](https://github.com/mloiseleur) #### :rocket: Features - feat(hub): :rocket: support traefik hub v3.20.16 and v3.21.3 [#2032](https://github.com/traefik/traefik-helm-chart/issues/2032) by [@mloiseleur](https://github.com/mloiseleur) - feat(hub): restrict Secret types written by Traefik Hub [#2031](https://github.com/traefik/traefik-helm-chart/issues/2031) by [@mloiseleur](https://github.com/mloiseleur) #### :bug: Bug fixes - fix(examples): fix outdated value schema used in `additionalServices` example [#2023](https://github.com/traefik/traefik-helm-chart/issues/2023) by [@jnoordsij](https://github.com/jnoordsij) #### :package: Others - chore(deps): update github actions [#2024](https://github.com/traefik/traefik-helm-chart/issues/2024) by [@renovate-with-github-actions](https://github.com/renovate-with-github-actions)\[bot] - chore(deps): update quay.io/helmpack/chart-testing docker tag to v3.15.0 [#2025](https://github.com/traefik/traefik-helm-chart/issues/2025) by [@renovate-with-github-actions](https://github.com/renovate-with-github-actions)\[bot] - docs(agents): document Traefik Hub version bump [#2033](https://github.com/traefik/traefik-helm-chart/issues/2033) by [@mloiseleur](https://github.com/mloiseleur) - docs(examples): add Traefik Hub Gateway with the Traefik MCP server as a sidecar [#2007](https://github.com/traefik/traefik-helm-chart/issues/2007) by [@emilevauge](https://github.com/emilevauge) - chore(release): 🚀 publish 42.0.0 [#2034](https://github.com/traefik/traefik-helm-chart/issues/2034) by [@mloiseleur](https://github.com/mloiseleur) #### 👌 Traefik version support - Traefik Proxy: v3.6.0 -> v3.7.14 (default) - Traefik Hub: v3.19.3 -> v3.21.3 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit 2026-10-15 16:02:33 +00:00

chore(deps): update helm release traefik to v42 a255292a0c

williamp merged commit ac933678a2 into main

2026-10-15 19:51:05 +00:00

williamp deleted branch renovate/traefik-42.x

2026-10-15 19:51:06 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: infrastructure/weyma-talos#411