v40.0.0 (2026-05-06)

Upgrade Notes

• The Service spec syntax in values.yaml is now aligned with Kubernetes syntax (cf. before / after example in the PR description)
• providers.kubernetesIngressNginx has been renamed to providers.kubernetesIngressNGINX to align with Traefik proxy naming (cf. before / after example in the PR description)

👌 Traefik version support

• Traefik Proxy: v3.6.0 -> v3.7.0 (default)
• Traefik Hub: v3.19.3 -> v3.20.0

💥 BREAKING CHANGES

• refactor(chart)!: support only Proxy v3.6+ & Kubernetes v25+ #1718 by @mloiseleur
• fix(providers)!: kubernetesIngressNginx => kubernetesIngressNGINX #1714 by @mloiseleur
• fix(service)!: align syntax with upstream #1686 by @parkerfath

🚀 Features

• feat: support templated values in service annotations #1696 by @DrFaust92
• feat(ingress): add native ingressEndpoint hostname and ip support #1695 by @DrFaust92
• feat(logs): add accesslog.dualOutput option #1725 by @darkweaver87
• feat(CRDs): 🚀 update CRDs to v3.7 #1721 by @darkweaver87
• feat(providers): 🚀 update NGINX with v3.7 options #1720 by @darkweaver87
• feat(entrypoints): add forwardedHeaders.notAppendXForwardedFor option #1723 by @darkweaver87
• feat(api): add dashboardName option #1726 by @darkweaver87
• feat(deployment): add hostUsers support #1744 by @DrFaust92
• feat(ports): add allowACMEByPass to web port values #1734 by @jnoordsij
• feat(ingressroute): support templating in annotations and labels #1728 by @DrFaust92
• feat(deps): update traefik docker tag to v3.6.12 (master) #1767 by @renovate-with-github-actions[bot]
• feat(deps): update traefik docker tag to v3.6.13 (master) #1793 by @renovate-with-github-actions[bot]
• feat(podtemplate): allow disabling automatic GOMEMLIMIT #1796 by @johnvanhienen
• feat(deps): update traefik docker tag to v3.6.15 (master) #1818 by @renovate-with-github-actions[bot]
• feat(proxy): add support of kubernetesIngressNGINX.ipAllowListStrategy #1828 by @mloiseleur
• feat(image): add image.digest for digest-based pinning #1821 by @zalbiraw
• feat(deps): support traefik v3.7.0 & hub v3.20.0 #1835 by @mloiseleur

🐛 Bug fixes

• fix(traefik-hub): set token using a file #1679 by @komalsukhani
• fix(providers.kubernetesIngressNGINX): 🐛 clarify int defaults #1829 by @darkweaver87

📦 Others

• refactor(providers): 🎨 kubernetes ingress nginx #1717 by @darkweaver87
• chore(ci): upgrade helm unittest to 1.0.1 #1713 by @mloiseleur
• docs(gateway): improve wording on namespaces #1716 by @mloiseleur
• test(acme): add certificateTimeout option coverage #1724 by @darkweaver87
• chore: 🍱 merge back 39.1.0-ea.2 into master #1727 by @darkweaver87
• chore(deps): update github actions (major) #1731 by @renovate-with-github-actions[bot]
• chore(deps): update github actions #1730 by @renovate-with-github-actions[bot]
• chore(deps): update github actions (major) #1756 by @renovate-with-github-actions[bot]
• chore(deps): update github actions #1755 by @renovate-with-github-actions[bot]
• docs(values): update reference links #1762 by @mloiseleur
• docs(values): clarify that kubernetesIngressNGINX.watchNamespace only watches one namespace #1759 by @parkerfath
• docs: clarify DaemonSet updateStrategy to prevent rollout deadlock #1761 by @Ahmed-Sameh-MM
• ci: fix renovate config and extend to v40.0 branch #1765 by @mloiseleur
• ci(renovate): add v40.0 baseBranch on traefik updates #1770 by @mloiseleur
• ci(renovate): disable gha update on previous branches #1774 by @mloiseleur
• ci(renovate): enable stable updates on v39.0 #1775 by @mloiseleur
• chore(deps): update ghcr.io/traefik/helm-changelog docker tag to v1 (master) #1771 by @renovate-with-github-actions[bot]
• chore(deps): update github actions (master) #1776 by @renovate-with-github-actions[bot]
• chore(deps): update dawidd6/action-download-artifact action to v20 (master) #1786 by @renovate-with-github-actions[bot]
• chore(deps): update github actions (master) #1785 by @renovate-with-github-actions[bot]
• chore(deps): update github actions (master) #1794 by @renovate-with-github-actions[bot]
• chore(deps): update renovatebot/github-action action to v46.1.10 (master) #1811 by @renovate-with-github-actions[bot]
• docs(examples): 📚 Azure Application Gateway and Load Balancer #1797 by @darkweaver87
• docs(examples): 📚 deployment with FluxCD OCI #1792 by @darkweaver87
• docs: add example for binding to privileged ports #1783 by @tmchow
• chore(deps): update renovatebot/github-action action to v46.1.13 (master) #1817 by @renovate-with-github-actions[bot]
• chore(deps): update dawidd6/action-download-artifact action to v21 (master) #1822 by @renovate-with-github-actions[bot]
• chore: 🍱 merge back v40.0 into master #1827 by @darkweaver87
• docs(readme): fix latest patch versions for legacy #1830 by @jnoordsij
• ci(renovate): switch to master branch #1833 by @mloiseleur
• ci(renovate): disable renovate self rate limit #1834 by @mloiseleur
• chore(release): 🚀 publish traefik 40.0.0 and crds 1.18.0 #1836 by @mloiseleur