发布日期: 2024-10-28
版本号: v3.2.0

Traefik发布了版本更新，包含功能增强、问题修复及文档调整。重要提示：建议用户阅读v3.1至v3.2版本的迁移指南。主要增强包括：ACME模块移除证书解析器的相同邮箱要求、支持自定义CA证书及30天证书有效期步长；Docker支持HTTP基础认证；Kubernetes Gateway API新增后端协议选择、HTTPRoute目标端口匹配、GRPC路由支持、响应头修改过滤器等功能，并升级至v1.2版本；中间件新增压缩编码选项、IPv6子网支持；服务层引入HTTP镜像请求保留路径配置等。性能方面优化了HTTP/1.1代理模式。修复了Kubernetes Gateway API中资源名称唯一性、GRPCRoute过滤器顺序、连接池异常等问题。文档更新涉及迁移指南细节、CRD配置及RBAC权限说明。此外包含版本合并及发布准备等常规维护内容。

更新内容 （中文）

重要提示： 请阅读迁移指南。

功能改进：

  • [acme] 移除证书解析器对相同邮箱的要求 (#11019 by Emrio)
  • [acme] 通过证书解析器支持自定义CA证书 (#10816 by ldez)
  • [acme] 新增30天证书有效期梯度配置 (#10970 by luker983)
  • [docker] 为Docker和Swarm端点支持HTTP基础认证 (#10776 by 985492783)
  • [k8s,k8s/gatewayapi] 在Gateway API GatewayClass状态中新增支持特性标识 (#11056 by rtribotte)
  • [k8s,k8s/gatewayapi] 升级sigs.k8s.io/gateway-api至v1.2.0-rc1 (#11124 by rtribotte)
  • [k8s,k8s/gatewayapi] 支持HTTP和GRPC路由的后端协议选择 (#11051 by rtribotte)
  • [k8s,k8s/gatewayapi] 增强Kubernetes GatewayAPI对TCPRoute和TLSRoute的支持 (#11042 by rtribotte)
  • [k8s,k8s/gatewayapi] 支持HTTPRoute目标端口匹配 (#11134 by kevinpollet)
  • [k8s,k8s/gatewayapi] 升级sigs.k8s.io/gateway-api至v1.2.0-rc2 (#11131 by kevinpollet)
  • [k8s,k8s/gatewayapi] 支持Gateway API BackendTLSPolicies (#11009 by rtribotte)
  • [k8s,k8s/gatewayapi] GatewayAPI提供程序支持NativeLB选项 (#11147 by rtribotte)
  • [k8s,k8s/gatewayapi] 支持ResponseHeaderModifier过滤器 (#10987 by kevinpollet)
  • [k8s,k8s/gatewayapi] 支持GRPC路由 (#10975 by kevinpollet)
  • [k8s,k8s/gatewayapi] 升级sigs.k8s.io/gateway-api至v1.2.0 (#11167 by rtribotte)
  • [metrics,otel] 支持为OTLP指标设置service.name (#10917 by cmartell-at-ocp)
  • [middleware,accesslogs] 在访问日志中记录Trace ID和EntryPoint Span ID (#10921 by weijiany)
  • [middleware,authentication] forwardAuth中间件支持LogUserHeader (#10833 by GaleHuang)
  • [middleware] 压缩中间件新增编码方式选项 (#10943 by wollomatic)
  • [middleware] 支持ipStrategy中的IPv6子网 (#9747 by michal-kralik)
  • [nomad] 支持通过监听替代轮询Nomad服务 (#10997 by deverton-godaddy)
  • [server,performance] 引入快速代理模式以提升HTTP/1.1后端性能 (#11122 by kevinpollet)
  • [server] 可配置最大请求头大小 (#10995 by lucasrod16)
  • [service] HTTP镜像新增mirrorBody选项 (#11032 by MatteoPaier)
  • [service] 新增保留服务路径选项 (#11193 by mmatur)

错误修复：

  • [k8s,k8s/gatewayapi] 确保Gateway API反映Traefik资源名称唯一性 (#11222 by rtribotte)
  • [k8s,k8s/gatewayapi] 保持GRPCRoute过滤器顺序 (#11199 by kevinpollet)
  • [k8s,k8s/gatewayapi] 支持Kubernetes Service的http和https应用协议 (#11176 by WillDaSilva)
  • [k8s,k8s/gatewayapi] 避免更新未匹配任何网关的路由的Accepted状态 (#11170 by rtribotte)
  • [k8s,k8s/gatewayapi] 未选中网关类时不更新网关状态 (#11169 by kevinpollet)
  • [service] 在fastproxy连接池中检测并丢弃损坏连接 (#11212 by kevinpollet)

文档更新：

其他：

更新内容 （原始）

Important: Please read the migration guide.

Enhancements:

  • [acme] Remove same email requirement for certresolvers (#11019 by Emrio)
  • [acme] Add support for custom CA certificates by certificate resolver (#10816 by ldez)
  • [acme] Add 30 day certificatesDuration step (#10970 by luker983)
  • [docker] Support HTTP BasicAuth for docker and swarm endpoint (#10776 by 985492783)
  • [k8s,k8s/gatewayapi] Add supported features to the Gateway API GatewayClass status (#11056 by rtribotte)
  • [k8s,k8s/gatewayapi] Update sigs.k8s.io/gateway-api to v1.2.0-rc1 (#11124 by rtribotte)
  • [k8s,k8s/gatewayapi] Add support for backend protocol selection in HTTP and GRPC routes (#11051 by rtribotte)
  • [k8s,k8s/gatewayapi] Improve Kubernetes GatewayAPI TCPRoute and TLSRoute support (#11042 by rtribotte)
  • [k8s,k8s/gatewayapi] Support HTTPRoute destination port matching (#11134 by kevinpollet)
  • [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0-rc2 (#11131 by kevinpollet)
  • [k8s,k8s/gatewayapi] Add support for Gateway API BackendTLSPolicies (#11009 by rtribotte)
  • [k8s,k8s/gatewayapi] Support NativeLB option in GatewayAPI provider (#11147 by rtribotte)
  • [k8s,k8s/gatewayapi] Support ResponseHeaderModifier filter (#10987 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support GRPC routes (#10975 by kevinpollet)
  • [k8s,k8s/gatewayapi] Bump sigs.k8s.io/gateway-api to v1.2.0 (#11167 by rtribotte)
  • [metrics,otel] Allow setting service.name for OTLP metrics (#10917 by cmartell-at-ocp)
  • [middleware,accesslogs] Record trace id and EntryPoint span id into access log (#10921 by weijiany)
  • [middleware,authentication] Support LogUserHeader with forwardAuth middleware (#10833 by GaleHuang)
  • [middleware] Add encodings option to the compression middleware (#10943 by wollomatic)
  • [middleware] Add support for ipv6 subnet in ipStrategy (#9747 by michal-kralik)
  • [nomad] Support for watching instead of polling Nomad (#10997 by deverton-godaddy)
  • [server,performance] Introduce a fast proxy mode to improve HTTP/1.1 performances with backends (#11122 by kevinpollet)
  • [server] Configurable max request header size (#10995 by lucasrod16)
  • [service] Add mirrorBody option to HTTP mirroring (#11032 by MatteoPaier)
  • [service] Add an option to preserve server path (#11193 by mmatur)

Bug fixes:

  • [k8s,k8s/gatewayapi] Ensuring Gateway API reflected Traefik resource name unicity (#11222 by rtribotte)
  • [k8s,k8s/gatewayapi] Preserve GRPCRoute filters order (#11199 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support http and https appProtocol for Kubernetes Service (#11176 by WillDaSilva)
  • [k8s,k8s/gatewayapi] Avoid updating Accepted status for routes matching no Gateways (#11170 by rtribotte)
  • [k8s,k8s/gatewayapi] Do not update gateway status when not selected by a gateway class (#11169 by kevinpollet)
  • [service] Detect and drop broken conns in the fastproxy pool (#11212 by kevinpollet)

Documentation:

Misc:

下载链接