Release notes

What's new in Traefik Hub.

November 2023¶

Traefik Hub now has a direct integration with Okta.
Starting today, you're able to use JWT to secure access to APIs.
We've added support for distributed rate limiting.
We've enhanced our OpenTelemetry metrics by adding support for API versions.
The UI now shows a warning sign when a Traefik Hub agent faces a connectivity issue.
We've released a new version of the Traefik Hub agent v2.4.2 and of the Helm chart v2.5.1 Changelog. Please upgrade the Traefik Hub agent to enjoy the latest enhancements. Depending on your set-up, please follow the detailed documentation about upgrading the Ingress Controller or the Sidecar mode installation.

In this release, we've added OpenTelemetry support to Traefik Hub.
We've added support for adjusting CORS and API header policies through CRDs and via the UI.
You can now manage workspace roles through the UI.

⚠️ The Traefik Hub agent v2.3.0 and Helm chart v.2.3.0 (Changelog) releases are fixing CVE-2023-44487 in the Traefik Hub agent.

You can use Keycloak for Single Sign-On (SSO) or as an identity broker for Traefik Hub.
We enhanced workspace management. You can now assign roles to workspace members. Every role, Viewer, Editor and Admin has a different set of permissions.
Traefik Hub now supports CORS (Cross-Origin Resource Sharing) configuration via CRDs.

We've added support for API versioning through CRDs and via the UI.
We've published the Traefik Hub Helm Chart on GitHub.
We've improved the UI to provide a better experience when you select Services. You can now better identify if you use an internal or external (API) Service.
The UI shows now a warning sign when the user's initial password reset has not been performed yet.
We've released a new version of the Traefik Hub Helm chart with an update of the Traefik Hub agent. Please find the changelog for v2.2.0 on GitHub. Please upgrade to version v2.2.0 to enjoy the latest enhancements. Depending on your set-up, please follow the detailed documentation about upgrading the Ingress Controller or the Sidecar mode installation.

The Traefik Hub agent supports now two different installation methods, the Ingress Controller mode and the Sidecar mode.
We've added Emissary (formerly Ambassador, an Envoy-based) Ingress support with Sidecar mode.
We've improved API management, you can now select APIs by name and by Labels. You can combine names and Labels to filter your selections even more.
We've added support for rate limiting to the UI.
We've added support for Swagger v2.

You can now manage external APIs, hosted outside your Kubernetes cluster, for example on Virtual Machines (VMs) or third party APIs.
Starting today, you're able to use rate limiting for APIs.
We strengthened security. The Traefik Hub token is now provided as a Secret during installation.
If you deal with large clusters, we made your life easier with filtering Services by namespace in the UI, to quickly find what you look for.
The UIs provide more guidance, with clear indications of which fields are required and more descriptions.
We've updated the UI to put key information right at your fingertips: information on APIs and API Collections, the API Developer Portal and Users.
Corresponding screens have been updated for better clarity.
We’ve improved the API Developer Portal responsiveness by adding HTTP cache control headers.
For you to more quickly see how to perform given tasks, we've restructured the documentation, added more tutorials and improved the content overall.
Based on your feedback, we've tinkered with the internal workings and polished some rough edges.

If your session has expired, you will now be redirected to the login screen.
We've fixed a couple of bugs in the UI related to pop-ups, selecting Services, user groups and error pages.
We've fixed a bug related to TLS termination.
There were a few little bugs that caused performances issues, like bugs do. We fixed those, and we’ll fix the next ones too.

We've changed the architecture, Hub now supports only K8s, the Agent uses a sidecar, and it is compatible with any Ingress Controller.
We've added a new ACP (Access Control Policy) for API Keys.
We've added a new OAuth Introspection ACP.
Starting today, you're able to use CRDs for APIs, APICollection, APIAccess, APIGateway, APIPortal objects.
API consumption is now protected by tokens.
We've added API Management, now you can use Hub as a platform for managing, routing, monitoring, and securing APIs.
You can use Traefik Hub as IdP (Identity Provider).
You can now fully customize your API Portal UIs.
We've replaced freemium tiers with a new trial mechanism.
User deletion is now fully GDPR-compliant, no user data is retained.
Traefik Hub supports now team collaboration with workspaces.
Traefik Hub is now compatible with Traefik's IngressRoute.
We've added support for wildcard domains.
We've added the functionality to expose Prometheus compatible metrics Prometheus compatible metrics from the Traefik Hub agent.
Hub errors are now leveraging K8s events.
We restructured and updated the documentation.
We adjusted the Service page in the UI, port numbers are now visible when they exceed more than 3 characters.