Update traefik Docker tag to v3.4.3

[renovate]

This PR contains the following updates:

Package	Update	Change
traefik	minor	v3.2.3 -> v3.4.3

---

Release Notes

containous/traefik (traefik)

v3.4.3

Compare Source

All Commits

Bug fixes:

• [http3] Bump quic-go to v.0.49.0 (#​11848 by joshua-siw)

v3.4.3

Compare Source

All Commits

Bug fixes:

• [http3] Bump quic-go to v.0.49.0 (#​11848 by joshua-siw)

v3.4.1

Compare Source

All Commits

Bug fixes:

• [docker] Do not warn network missing if connected to a container network (#​11698 by holysoles)
• [k8s/crd] Fix CEL validation for RootCA in ServersTransport (#​11775 by rtribotte)
• [middleware] Scope the rate limit counter key by source and by middleware (#​11753 by aromeyer)
• [server] Use routing path in v3 matchers (#​11790 by kevinpollet)
• [service] Make P2C strategy thread-safe (#​11762 by lbenguigui)
• [webui] Do not display RemoveHeader option when not defined (#​11782 by kevinpollet)

Documentation:

• [acme] Fix ambiguous wording in ACME page (#​11789 by joshka)
• [k8s] Fix incorrect case and missing rbac in documentation (#​11742 by mmatur)
• [middleware] Match encoded certificate to example data for TLS passthrough (#​11759 by holysoles)

Misc:

• Merge branch v2.11 into v3.4 (#​11799 by kevinpollet)
• Merge branch v2.11 into v3.4 (#​11796 by kevinpollet)
• Merge branch v2.11 into v3.4 (#​11783 by kevinpollet)
• Merge branch v2.11 into v3.4 (#​11757 by mmatur)
• Merge v2.11 into v3.4 (#​11751 by mmatur)

v3.4.1

Compare Source

All Commits

Bug fixes:

• [docker] Do not warn network missing if connected to a container network (#​11698 by holysoles)
• [k8s/crd] Fix CEL validation for RootCA in ServersTransport (#​11775 by rtribotte)
• [middleware] Scope the rate limit counter key by source and by middleware (#​11753 by aromeyer)
• [server] Use routing path in v3 matchers (#​11790 by kevinpollet)
• [service] Make P2C strategy thread-safe (#​11762 by lbenguigui)
• [webui] Do not display RemoveHeader option when not defined (#​11782 by kevinpollet)

Documentation:

• [acme] Fix ambiguous wording in ACME page (#​11789 by joshka)
• [k8s] Fix incorrect case and missing rbac in documentation (#​11742 by mmatur)
• [middleware] Match encoded certificate to example data for TLS passthrough (#​11759 by holysoles)

Misc:

• Merge branch v2.11 into v3.4 (#​11799 by kevinpollet)
• Merge branch v2.11 into v3.4 (#​11796 by kevinpollet)
• Merge branch v2.11 into v3.4 (#​11783 by kevinpollet)
• Merge branch v2.11 into v3.4 (#​11757 by mmatur)
• Merge v2.11 into v3.4 (#​11751 by mmatur)

v3.4.0

Compare Source

All Commits

Enhancements:

• [acme] Add acme.profile and acme.emailAddresses options (#​11597 by ldez)
• [docker,ecs,docker/swarm,consulcatalog,nomad] Allow configuring server URLs with label providers (#​11374 by yelvert)
• [k8s/crd] Improve CEL validation on Ingress CRD resources (#​11311 by mloiseleur)
• [k8s/crd] Remove default load-balancing strategy from CRD (#​11701 by kevinpollet)
• [k8s/crd] Restrict regex validation of HTTP status codes for Ingress CRD resources (#​11670 by jnoordsij)
• [k8s/gatewayapi] Set rule priority in Gateway API TLSRoute (#​11443 by augustozanellato)
• [k8s/ingress] Add ingress status for ClusterIP and NodePort Service Type (#​11100 by mlec1)
• [middleware,authentication] Add option to preserve request method in forwardAuth (#​11473 by an09mous)
• [middleware] Support rewriting status codes in error page middleware (#​11520 by sevensolutions)
• [middleware] Add Redis rate limiter (#​10211 by longquan0104)
• [service] Add p2c load-balancing strategy for servers load-balancer (#​11547 by rtribotte)
• [sticky-session] Support domain configuration for sticky cookies (#​11556 by jleal52)
• [tls,k8s/crd,service] Allow root CA to be added through config maps (#​11475 by Nelwhix)
• [tls] Add support to disable session ticket (#​11609 by avdhoot)
• [udp] Add support for UDP routing in systemd socket activation (#​11022 by tsiid)
• [webui] Add auto webui theme option and default to it (#​11455 by zizzfizzix)
• Replace experimental maps and slices with stdlib (#​11350 by Juneezee)
• Bump github.com/redis/go-redis/v9 to v9.7.3 (#​11687 by kevinpollet)

Documentation:

• Prepare release v3.4.0-rc1 (#​11654 by kevinpollet)
• Prepare release v3.4.0-rc2 (#​11707 by rtribotte)
• Deprecate defaultRuleSyntax and ruleSyntax options (#​11619 by rtribotte)

Misc:

• Merge branch v3.3 into master (#​11653 by kevinpollet)
• Merge branch v3.3 into master (#​11595 by kevinpollet)
• Merge branch v3.3 into master (#​11541 by kevinpollet)
• Merge branch v3.3 into master (#​11504 by kevinpollet)
• Merge branch v3.3 into master (#​11420 by kevinpollet)
• Merge branch v3.3 into master (#​11394 by mmatur)
• Merge branch v3.3 into v3.4 (#​11736 by kevinpollet)
• Merge branch v3.3 into v3.4 (#​11705 by kevinpollet)

v3.4.0

Compare Source

All Commits

Enhancements:

• [acme] Add acme.profile and acme.emailAddresses options (#​11597 by ldez)
• [docker,ecs,docker/swarm,consulcatalog,nomad] Allow configuring server URLs with label providers (#​11374 by yelvert)
• [k8s/crd] Improve CEL validation on Ingress CRD resources (#​11311 by mloiseleur)
• [k8s/crd] Remove default load-balancing strategy from CRD (#​11701 by kevinpollet)
• [k8s/crd] Restrict regex validation of HTTP status codes for Ingress CRD resources (#​11670 by jnoordsij)
• [k8s/gatewayapi] Set rule priority in Gateway API TLSRoute (#​11443 by augustozanellato)
• [k8s/ingress] Add ingress status for ClusterIP and NodePort Service Type (#​11100 by mlec1)
• [middleware,authentication] Add option to preserve request method in forwardAuth (#​11473 by an09mous)
• [middleware] Support rewriting status codes in error page middleware (#​11520 by sevensolutions)
• [middleware] Add Redis rate limiter (#​10211 by longquan0104)
• [service] Add p2c load-balancing strategy for servers load-balancer (#​11547 by rtribotte)
• [sticky-session] Support domain configuration for sticky cookies (#​11556 by jleal52)
• [tls,k8s/crd,service] Allow root CA to be added through config maps (#​11475 by Nelwhix)
• [tls] Add support to disable session ticket (#​11609 by avdhoot)
• [udp] Add support for UDP routing in systemd socket activation (#​11022 by tsiid)
• [webui] Add auto webui theme option and default to it (#​11455 by zizzfizzix)
• Replace experimental maps and slices with stdlib (#​11350 by Juneezee)
• Bump github.com/redis/go-redis/v9 to v9.7.3 (#​11687 by kevinpollet)

Documentation:

• Prepare release v3.4.0-rc1 (#​11654 by kevinpollet)
• Prepare release v3.4.0-rc2 (#​11707 by rtribotte)
• Deprecate defaultRuleSyntax and ruleSyntax options (#​11619 by rtribotte)

Misc:

• Merge branch v3.3 into master (#​11653 by kevinpollet)
• Merge branch v3.3 into master (#​11595 by kevinpollet)
• Merge branch v3.3 into master (#​11541 by kevinpollet)
• Merge branch v3.3 into master (#​11504 by kevinpollet)
• Merge branch v3.3 into master (#​11420 by kevinpollet)
• Merge branch v3.3 into master (#​11394 by mmatur)
• Merge branch v3.3 into v3.4 (#​11736 by kevinpollet)
• Merge branch v3.3 into v3.4 (#​11705 by kevinpollet)

v3.3.7

Compare Source

All Commits

Bug fixes:

• [logs,middleware,accesslogs] Add SpanID and TraceID accessLogs fields only when tracing is enabled (#​11715 by rtribotte)

v3.3.7

Compare Source

All Commits

Bug fixes:

• [logs,middleware,accesslogs] Add SpanID and TraceID accessLogs fields only when tracing is enabled (#​11715 by rtribotte)

v3.3.6

Compare Source

All Commits

Documentation:

• [k8s/gatewayapi] Fix Kubernetes Gateway statusAddress documentation (#​11663 by kevinpollet)
• [tracing] Document how to pass multiple Headers on tracing with CLI (#​11665 by mloiseleur)
• Fix typos on what is Traefik docs page (#​11685 by matthewCmatt)
• Update Welcome Page (#​11615 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.3 (#​11703 by kevinpollet)
• Merge branch v2.11 into v3.3 (#​11696 by rtribotte)
• Merge branch v2.11 into v3.3 (#​11694 by rtribotte)

v3.3.6

Compare Source

All Commits

Documentation:

• [k8s/gatewayapi] Fix Kubernetes Gateway statusAddress documentation (#​11663 by kevinpollet)
• [tracing] Document how to pass multiple Headers on tracing with CLI (#​11665 by mloiseleur)
• Fix typos on what is Traefik docs page (#​11685 by matthewCmatt)
• Update Welcome Page (#​11615 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.3 (#​11703 by kevinpollet)
• Merge branch v2.11 into v3.3 (#​11696 by rtribotte)
• Merge branch v2.11 into v3.3 (#​11694 by rtribotte)

v3.3.5

Compare Source

All Commits

Bug fixes:

• [k8s/gatewayapi] Set scheme to https with BackendTLSPolicy (#​11586 by rtribotte)
• [middleware] Revert compress middleware algorithms priority to v2 behavior (#​11641 by rtribotte)
• [middleware] Do not abort request when response content-type is malformed (#​11628 by kevinpollet)
• [middleware] Compress data on flush when compression is not started (#​11583 by kevinpollet)

Documentation:

• [middleware] Add back forwarded headers section in FAQ (#​11606 by kevinpollet)
• New Routing Reference Documentation (#​11330 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.3 (#​11644 by kevinpollet)
• Merge branch v2.11 into v3.3 (#​11594 by rtribotte)

v3.3.5

Compare Source

All Commits

Bug fixes:

• [k8s/gatewayapi] Set scheme to https with BackendTLSPolicy (#​11586 by rtribotte)
• [middleware] Revert compress middleware algorithms priority to v2 behavior (#​11641 by rtribotte)
• [middleware] Do not abort request when response content-type is malformed (#​11628 by kevinpollet)
• [middleware] Compress data on flush when compression is not started (#​11583 by kevinpollet)

Documentation:

• [middleware] Add back forwarded headers section in FAQ (#​11606 by kevinpollet)
• New Routing Reference Documentation (#​11330 by sheddy-traefik)

Misc:

• Merge branch v2.11 into v3.3 (#​11644 by kevinpollet)
• Merge branch v2.11 into v3.3 (#​11594 by rtribotte)

v3.3.4

Compare Source

All Commits

Bug fixes:

• [fastproxy] Bump github.com/valyala/fasthttp to v1.58.0 (#​11526 by kevinpollet)
• [fastproxy] Add WebSocket headers if they are present in the request (#​11522 by kevinpollet)
• [fastproxy] Chunked responses does not have a Content-Length header (#​11514 by kevinpollet)
• [metrics,otel] Change request duration metric unit from millisecond to second (#​11523 by rtribotte)
• [sticky-session] Fix double hash in sticky cookie (#​11518 by juliens)
• [tracing] Use ResourceAttributes instead of GlobalAttributes (#​11515 by bruno-de-queiroz)
• [tracing] Fix panic when calling Tracer (#​11479 by basgys)

Documentation:

• [acme] Update ACME provider configuration options (#​11564 by sheddy-traefik)
• [acme] Fix incorrect grammar in ACME documentation (#​11553 by Peter-Maguire)
• [metrics,tracing,accesslogs] Add missing options in entrypoints page (#​11524 by sheddy-traefik)
• [tracing] Replace globalAttributes with resourceAttributes in tracing reference (#​11531 by rtribotte)

Misc:

• Merge branch v2.11 into v3.3 (#​11567 by kevinpollet)

v3.3.4

Compare Source

All Commits

Bug fixes:

• [fastproxy] Bump github.com/valyala/fasthttp to v1.58.0 (#​11526 by kevinpollet)
• [fastproxy] Add WebSocket headers if they are present in the request (#​11522 by kevinpollet)
• [fastproxy] Chunked responses does not have a Content-Length header (#​11514 by kevinpollet)
• [metrics,otel] Change request duration metric unit from millisecond to second (#​11523 by rtribotte)
• [sticky-session] Fix double hash in sticky cookie (#​11518 by juliens)
• [tracing] Use ResourceAttributes instead of GlobalAttributes (#​11515 by bruno-de-queiroz)
• [tracing] Fix panic when calling Tracer (#​11479 by basgys)

Documentation:

• [acme] Update ACME provider configuration options (#​11564 by sheddy-traefik)
• [acme] Fix incorrect grammar in ACME documentation (#​11553 by Peter-Maguire)
• [metrics,tracing,accesslogs] Add missing options in entrypoints page (#​11524 by sheddy-traefik)
• [tracing] Replace globalAttributes with resourceAttributes in tracing reference (#​11531 by rtribotte)

Misc:

• Merge branch v2.11 into v3.3 (#​11567 by kevinpollet)

v3.3.3

Compare Source

All Commits

Bug fixes:

• [api] Do not create observability model by default (#​11476 by rtribotte)
• [fastproxy] Fix content-length header assertion (#​11498 by kevinpollet)
• [fastproxy] Handle responses without content length header (#​11458 by rtribotte)
• [k8s/crd,k8s] Add missing headerField in Middleware CRD (#​11499 by jspdown)
• [tracing,accesslogs] Bring back TraceID and SpanID fields in access logs (#​11450 by rtribotte)

Misc:

• Merge branch v2.11 into v3.3 (#​11502 by rtribotte)
• Merge branch v2.11 into v3.3 (#​11491 by rtribotte)

v3.3.3

Compare Source

All Commits

Bug fixes:

• [api] Do not create observability model by default (#​11476 by rtribotte)
• [fastproxy] Fix content-length header assertion (#​11498 by kevinpollet)
• [fastproxy] Handle responses without content length header (#​11458 by rtribotte)
• [k8s/crd,k8s] Add missing headerField in Middleware CRD (#​11499 by jspdown)
• [tracing,accesslogs] Bring back TraceID and SpanID fields in access logs (#​11450 by rtribotte)

Misc:

• Merge branch v2.11 into v3.3 (#​11502 by rtribotte)
• Merge branch v2.11 into v3.3 (#​11491 by rtribotte)

v3.3.2

Compare Source

All Commits

Bug fixes:

• [fastproxy] Do not read response body for HEAD requests (#​11442 by kevinpollet)
• [metrics,tracing,accesslogs] Fix observability configuration on EntryPoints (#​11446 by rtribotte)
• [webui] Set content-type when serving webui index (#​11428 by kevinpollet)

Documentation:

• [acme] Fix deprecated dnsChallenge propagation logging and documentation (#​11433 by thomscode)
• [acme] Add missing trailing s to propagation.delayBeforeCheck option (#​11417 by jspiers)

Misc:

• Merge branch v2.11 into v3.3 (#​11419 by kevinpollet)

v3.3.2

Compare Source

All Commits

Bug fixes:

• [fastproxy] Do not read response body for HEAD requests (#​11442 by kevinpollet)
• [metrics,tracing,accesslogs] Fix observability configuration on EntryPoints (#​11446 by rtribotte)
• [webui] Set content-type when serving webui index (#​11428 by kevinpollet)

Documentation:

• [acme] Fix deprecated dnsChallenge propagation logging and documentation (#​11433 by thomscode)
• [acme] Add missing trailing s to propagation.delayBeforeCheck option (#​11417 by jspiers)

Misc:

• Merge branch v2.11 into v3.3 (#​11419 by kevinpollet)

v3.3.1

Compare Source

All Commits

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#​11408 by rtribotte)

v3.3.1

Compare Source

All Commits

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#​11408 by rtribotte)

v3.3.0

Compare Source

All Commits

Enhancements:

• [acme] Add options to control ACME propagation checks (#​11241 by ldez)
• [api] Add support dump API endpoint (#​11328 by mmatur)
• [http] Set Host header in HTTP provider request (#​11237 by nikonhub)
• [k8s/crd,k8s] Make the IngressRoute kind optional (#​11177 by skirtan1)
• [k8s/ingress,sticky-session,k8s/crd,k8s] Support serving endpoints (#​11121 by BZValoche)
• [logs,accesslogs] OpenTelemetry Logs and Access Logs (#​11319 by rtribotte)
• [logs,accesslogs] Add experimental flag for OTLP logs integration (#​11335 by kevinpollet)
• [metrics,tracing,accesslogs] Manage observability at entrypoint and router level (#​11308 by rtribotte)
• [middleware,authentication] Add an option to preserve the ForwardAuth Server Location header (#​11318 by Nelwhix)
• [middleware,authentication] Only calculate basic auth hashes once for concurrent requests (#​11143 by michelheusschen)
• [middleware,authentication] Send request body to authorization server for forward auth (#​11097 by kyo-ke)
• [plugins] Add AbortOnPluginFailure option to abort startup on plugin load failure (#​11228 by bmagic)
• [sticky-session] Configurable path for sticky cookies (#​11166 by IIpragmaII)
• [webui,api] Configurable API & Dashboard base path (#​11250 by rtribotte)

Bug fixes:

• [k8s/ingress,k8s/crd] Fix fenced server status computation (#​11361 by kevinpollet)

Documentation:

• Prepare release v3.3.0-rc2 (#​11362 by rtribotte)
• Prepare Release v3.3.0-rc1 (#​11349 by rtribotte)

Misc:

• Merge branch v3.2 into v3.3 (#​11402 by kevinpollet)
• Merge branch v3.2 into v3.3 (#​11393 by mmatur)
• Merge branch v3.2 into v3.3 (#​11389 by mmatur)
• Merge branch v3.2 into v3.3 (#​11367 by kevinpollet)
• Merge branch v3.2 into master (#​11340 by kevinpollet)
• Merge branch v3.2 into master (#​11293 by kevinpollet)
• Merge branch v3.2 into master (#​11239 by kevinpollet)
• Merge branch v3.2 into master (#​11187 by kevinpollet)

v3.3.0

Compare Source

All Commits

Enhancements:

• [acme] Add options to control ACME propagation checks (#​11241 by ldez)
• [api] Add support dump API endpoint (#​11328 by mmatur)
• [http] Set Host header in HTTP provider request (#​11237 by nikonhub)
• [k8s/crd,k8s] Make the IngressRoute kind optional (#​11177 by skirtan1)
• [k8s/ingress,sticky-session,k8s/crd,k8s] Support serving endpoints (#​11121 by BZValoche)
• [logs,accesslogs] OpenTelemetry Logs and Access Logs (#​11319 by rtribotte)
• [logs,accesslogs] Add experimental flag for OTLP logs integration (#​11335 by kevinpollet)
• [metrics,tracing,accesslogs] Manage observability at entrypoint and router level (#​11308 by rtribotte)
• [middleware,authentication] Add an option to preserve the ForwardAuth Server Location header (#​11318 by Nelwhix)
• [middleware,authentication] Only calculate basic auth hashes once for concurrent requests (#​11143 by michelheusschen)
• [middleware,authentication] Send request body to authorization server for forward auth (#​11097 by kyo-ke)
• [plugins] Add AbortOnPluginFailure option to abort startup on plugin load failure (#​11228 by bmagic)
• [sticky-session] Configurable path for sticky cookies (#​11166 by IIpragmaII)
• [webui,api] Configurable API & Dashboard base path (#​11250 by rtribotte)

Bug fixes:

• [k8s/ingress,k8s/crd] Fix fenced server status computation (#​11361 by kevinpollet)

Documentation:

• Prepare release v3.3.0-rc2 (#​11362 by rtribotte)
• Prepare Release v3.3.0-rc1 (#​11349 by rtribotte)

Misc:

• Merge branch v3.2 into v3.3 (#​11402 by kevinpollet)
• Merge branch v3.2 into v3.3 (#​11393 by mmatur)
• Merge branch v3.2 into v3.3 (#​11389 by mmatur)
• Merge branch v3.2 into v3.3 (#​11367 by kevinpollet)
• Merge branch v3.2 into master (#​11340 by kevinpollet)
• Merge branch v3.2 into master (#​11293 by kevinpollet)
• Merge branch v3.2 into master (#​11239 by kevinpollet)
• Merge branch v3.2 into master (#​11187 by kevinpollet)

v3.2.5

Compare Source

All Commits

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#​11408 by rtribotte)

v3.2.5

Compare Source

All Commits

Bug fixes:

• [websocket,server] Disable http2 connect setting for websocket by default (#​11408 by rtribotte)

v3.2.4

Compare Source

All Commits

Bug fixes:

• [k8s/gatewayapi] Support empty value for core Kubernetes API group (#​11386 by rtribotte)
• [tcp,k8s/crd] Pass TLS bool from IngressRouteTCP to TCPService (#​11343 by lipmem)
• [tls] Upgrade github.com/spiffe/go-spiffe/v2 to v2.4.0 (#​11385 by mmatur)
• Remove duplicate github.com/coreos/go-systemd dependency (#​11354 by Juneezee)

Documentation:

• [k8s/gatewayapi] Update Gateway API version support to v1.2.1 (#​11357 by kevinpollet)
• Add @​jnoordsij to maintainers (#​11352 by emilevauge)

Misc:

• Merge branch v2.11 into v3.2 (#​11400 by kevinpollet)
• Merge branch v2.11 into v3.2 (#​11392 by rtribotte)
• Merge branch v2.11 into v3.2 (#​11388 by mmatur)
• Merge branch v2.11 into v3.2 (#​11366 by kevinpollet)

v3.2.4

Compare Source

All Commits

Bug fixes:

• [k8s/gatewayapi] Support empty value for core Kubernetes API group (#​11386 by rtribotte)
• [tcp,k8s/crd] Pass TLS bool from IngressRouteTCP to TCPService (#​11343 by lipmem)
• [tls] Upgrade github.com/spiffe/go-spiffe/v2 to v2.4.0 (#​11385 by mmatur)
• Remove duplicate github.com/coreos/go-systemd dependency (#​11354 by Juneezee)

Documentation:

• [k8s/gatewayapi] Update Gateway API version support to v1.2.1 (#​11357 by kevinpollet)
• Add @​jnoordsij to maintainers (#​11352 by emilevauge)

Misc:

• Merge branch v2.11 into v3.2 (#​11400 by kevinpollet)
• Merge branch v2.11 into v3.2 (#​11392 by rtribotte)
• Merge branch v2.11 into v3.2 (#​11388 by mmatur)
• Merge branch v2.11 into v3.2 (#​11366 by kevinpollet)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.