|
1 | 1 | # Change Log |
2 | 2 |
|
| 3 | +## 41.4.0    |
| 4 | + |
| 5 | +**Release date:** 2026-08-27 |
| 6 | + |
| 7 | +* fix: :bug: hub/proxy mapping |
| 8 | +* fix(rbac): restore secretResourceNames for namespaced role |
| 9 | +* feat: deprecate `underscoreHeadersStrategy` value |
| 10 | +* feat: add `aliasHeadersStrategy` value |
| 11 | +* feat(hub): :sparkles: support apiManagement OpenAPI refresh interval |
| 12 | +* feat(deps): update traefik docker tag to v3.7.12 |
| 13 | +* feat(deps): update ghcr.io/traefik/traefik-hub docker tag to v3.20.12 |
| 14 | +* chore(release): 🚀 publish 41.4.0 |
| 15 | + |
| 16 | +### Default value changes |
| 17 | + |
| 18 | +```diff |
| 19 | +diff --git a/traefik/values.yaml b/traefik/values.yaml |
| 20 | +index 54a55eb..6bef216 100644 |
| 21 | +--- a/traefik/values.yaml |
| 22 | ++++ b/traefik/values.yaml |
| 23 | +@@ -1044,9 +1044,13 @@ ports: |
| 24 | + middlewares: [] # @schema type: [array, null] |
| 25 | + # -- (bool) See [upstream documentation](https://doc.traefik.io/traefik/security/request-path/#path-sanitization) |
| 26 | + sanitizePath: # @schema type:[boolean, null] |
| 27 | +- # -- Defines how request headers with underscores in their names are handled (v3.7.6+). |
| 28 | ++ # -- Defines how request headers with non-alphanumeric characters in their names are handled (v3.7.12+). |
| 29 | ++ # See [upstream documentation](https://doc.traefik.io/traefik/reference/install-configuration/entrypoints/#aliasheadersstrategy) |
| 30 | ++ aliasHeadersStrategy: # @schema enum:[keep, delete, reject, null]; type:[string, null] |
| 31 | ++ # -- Defines how request headers with underscores in their names are handled (v3.7.6-v3.7.11). |
| 32 | ++ # Replaced by the aliasHeadersStrategy option for Traefik v3.7.12+. |
| 33 | + # See [upstream documentation](https://doc.traefik.io/traefik/reference/install-configuration/entrypoints/#underscoreheadersstrategy) |
| 34 | +- underscoreHeadersStrategy: # @schema enum:[keep, delete, reject, null]; type:[string, null] |
| 35 | ++ underscoreHeadersStrategy: # @schema deprecated; enum:[keep, delete, reject, null]; type:[string, null] |
| 36 | + tls: |
| 37 | + # -- See [upstream documentation](https://doc.traefik.io/traefik/reference/install-configuration/entrypoints/#opt-http-tls) |
| 38 | + # @default -- true |
| 39 | +@@ -1207,6 +1211,8 @@ rbac: # @schema additionalProperties: false |
| 40 | + # -- Enable user-facing roles |
| 41 | + # https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles |
| 42 | + aggregateTo: [] |
| 43 | ++ # -- List of Kubernetes secrets that are accessible for Traefik when `rbac.namespaced` is true. If empty, then access is granted to every secret. Ignored when `rbac.namespaced` is false (ClusterRole), since Kubernetes RBAC does not support `resourceNames` on cluster-scoped list/watch rules. |
| 44 | ++ secretResourceNames: [] |
| 45 | + |
| 46 | + # -- The service account the pods will use to interact with the Kubernetes API |
| 47 | + serviceAccount: # @schema additionalProperties: false |
| 48 | +@@ -1327,6 +1333,9 @@ hub: # @schema additionalProperties: false |
| 49 | + openApi: |
| 50 | + # -- When set to true, it will only accept paths and methods that are explicitly defined in its OpenAPI specification |
| 51 | + validateRequestMethodAndPath: false |
| 52 | ++ # -- Interval to refresh the OpenAPI specification, as a Go duration. Must be at least `1m`. |
| 53 | ++ # @default -- `1m` when unset |
| 54 | ++ refreshInterval: "" |
| 55 | + |
| 56 | + mcpgateway: |
| 57 | + # -- Set to true in order to enable AI MCP Gateway. Requires a valid license token. |
| 58 | +``` |
| 59 | + |
| 60 | + |
3 | 61 | ## 41.3.0    |
4 | 62 |
|
5 | 63 | **Release date:** 2026-08-19 |
|
0 commit comments