Official Helm chart for the Traefik proxy
v41.6.0 (2026-09-16)
:rocket: Features
:bug: Bug fixes
:package: Others
👌 Traefik version support
v41.5.0 (2026-09-07)
[!IMPORTANT] This release includes a CRD update. See chart UPGRADING instructions and upstream migration guide.
:rocket: Features
:bug: Bug fixes
:package: Others
👌 Traefik version support
v41.4.0 (2026-08-27)
:rocket: Features
aliasHeadersStrategy value #1982 by @jnoordsijunderscoreHeadersStrategy value #1983 by @jnoordsij:bug: Bug fixes
:package: Others
👌 Traefik version support
v41.3.0 (2026-08-21)
:rocket: Features
:package: Others
👌 Traefik version support
v41.2.0 (2026-08-07)
[!IMPORTANT] This release includes a CRD update. See chart UPGRADING instructions and upstream migration guide.
:rocket: Features
:bug: Bug fixes
:package: Others
👌 Traefik version support
v41.1.1 (2026-08-03)
:bug: Bug fixes
:package: Others
👌 Traefik version support
v41.1.0 (2026-07-30)
:rocket: Features
hub-manager chart #1784 by @bpsoraggi:bug: Bug fixes
:package: Others
👌 Traefik version support
v41.0.2 (2026-07-06)
:rocket: Features
:bug: Bug fixes
:package: Others
👌 Traefik version support
v41.0.1 (2026-06-29)
:rocket: Features
:bug: Bug fixes
:package: Others
👌 Traefik version support
v41.0.0 (2026-06-16)
Upgrade Notes
logs.general is renamed to log (e.g. logs.general.level → log.level).logs.access is renamed to accessLog (e.g. logs.access.format → accessLog.format).filters.statuscodes → filters.statusCodes, filters.retryattempts → filters.retryAttempts, filters.minduration → filters.minDuration, and fields.*.defaultmode → fields.*.defaultMode.accessLog.fields.general nesting level is removed: fields.general.defaultmode → fields.defaultMode.Expand commentComment on line R27Resolvedproviders.file.content is now an object ({}) instead of a string ("").[!TIP] Image
registryandrepositorynow default tonull. The chart now automatically resolves the full official image URI for both Traefik Proxy and Traefik Hub.
:boom: BREAKING CHANGES
:rocket: Features
:bug: Bug fixes
:package: Others
👌 Traefik version support
v40.3.0 (2026-06-09)
:rocket: Features
:bug: Bug fixes
:package: Others
👌 Traefik version support
v40.2.0 (2026-05-13)
Upgrade guide
[!IMPORTANT] This release is the first release without Gateway API v1.5.1 CRDs. The reason why it has been removed is detailed in #1169. See UPGRADING instructions and upstream migration guide.
:rocket: Features
:bug: Bug fixes
:package: Others
👌 Traefik version support
v40.1.0 (2026-05-12)
:rocket: Features
:bug: Bug fixes
:package: Others
👌 Traefik version support
v40.0.1 (2026-05-11)
:rocket: Features
:package: Others
👌 Traefik version support
v40.0.0 (2026-05-06)
Upgrade Notes
[!IMPORTANT] Traefik v3.7.0 comes with CRDs update. See UPGRADING instructions and upstream migration guide.
[!NOTE] Gateway API CRDs will no longer be shipped with this chart in a future minor version. See #1669 for more details.
Service spec syntax in values.yaml is now aligned with Kubernetes syntax (cf. before / after example in the PR description)providers.kubernetesIngressNginx has been renamed to providers.kubernetesIngressNGINX to align with Traefik proxy naming (cf. before / after example in the PR description)👌 Traefik version support
:boom: BREAKING CHANGES
:rocket: Features
:bug: Bug fixes
:package: Others
Traefik is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease.
The Traefik Helm chart is focused on Traefik deployment configuration.
To keep this Helm chart as generic as possible, we avoid integrating third-party solutions or targeting specific use cases.
If you want to customize the chart for your needs, you can:
kubectl apply -f myconf.yaml).Examples of common usage are provided.
If you need to include additional Kubernetes objects or extend functionality, use extraObjects or add this chart as a subchart.
Starting with v28.x, this chart bootstraps Traefik Proxy version 3 as a Kubernetes ingress controller, using the IngressRoute Custom Resource.
To upgrade from chart versions prior to v28.x (which use Traefik Proxy version 2), see:
README on the v27 branchStarting with v34.x, to work around Helm caveats, you can use an additional chart dedicated to CRDs: traefik-crds.
⚠️ This has been deprecated since v38.0.2.
⚠️ Gateway API CRDs are no longer shipped with this chart.
If you use the Kubernetes Gateway API provider, you will need to install them yourself before deploying Traefik v3.7.12:
kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.6.1/standard-install.yamlThis chart's support policy aligns with the upstream support policy of Traefik Proxy.
If you need to use an unmaintained version of Traefik, it requires a previous version of the Chart.
Below is non-exhaustive compatibility list:
| Traefik | Chart | ArtifactHub |
|---|---|---|
| v2.x | v27 | latest v27 |
| v3.0-v3.5 | v39 | latest v39 |
kubectl versionhelm versionhelm repo add traefik https://traefik.github.io/chartsTo install the chart with default values:
helm install traefik traefik/traefikor, to install from the OCI registry:
helm install traefik oci://ghcr.io/traefik/helm/traefikTo customize the installation, provide a custom values file:
helm install -f myvalues.yaml traefik traefik/traefikTo see example values files, refer to the provided EXAMPLES.
For complete documentation on all available parameters, check the default values file.
Starting with v37.0.0, chart releases are signed using provenance files.
To verify the chart, follow these steps:
To download the official Traefik Helm chart signing key, run:
gpg --receive-keys --keyserver hkps://keys.openpgp.org 'B0FBA7678F685E9B7024B79FFD92BB57C5A71A99'Example output:
gpg: key FD92BB57C5A71A99: public key "TraefikLabs Chart Signing Key <noreply@traefik.io>" imported
gpg: Total number processed: 1
gpg: imported: 1By default, GnuPG v2 stores keyrings in a format that is not compatible with Helm chart provenance verification. Before you can verify a Helm chart, you must convert your keyrings to the legacy format:
gpg --export --output $HOME/.gnupg/pubring.gpg 'B0FBA7678F685E9B7024B79FFD92BB57C5A71A99'To verify the chart, use the appropriate command for your registry:
OCI Registry
helm fetch --verify --keyring $HOME/.gnupg/traefik.pubring.gpg oci://ghcr.io/traefik/helm/traefik:<VERSION>Helm Registry (GitHub Pages)
helm fetch --verify --keyring $HOME/.gnupg/traefik.pubring.gpg traefik/traefik --version <VERSION>To see what has changed in each release, check the Changelog.
A new major version indicates that there is an incompatible breaking change.
[!WARNING] To avoid issues, always read the release notes for this chart before upgrading.
If you use Helm's native CRD management, you MUST upgrade CRDs before running helm upgrade, since Helm does not update CRDs automatically. See HIP-0011 for details.
To upgrade the Traefik chart and its CRDs:
# Update the chart repository
helm repo update
# Check current chart & Traefik version
helm search repo traefik/traefik
# Update Traefik CRDs
helm show crds traefik/traefik | kubectl apply --server-side --force-conflicts -f -
# Update Gateway API CRDs, if needed
kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.5.1/standard-install.yaml
# Upgrade Traefik release
helm upgrade traefik traefik/traefikTo contribute to this chart, please read the Contributing Guide.
Thank you to everyone who has already contributed!
<a href="https://github.com/traefik/traefik-helm-chart/graphs/contributors"> <img src="https://contributors-img.web.app/image?repo=traefik/traefik-helm-chart" alt="Contributors"/> </a>