Traefik v3.7.5 released on 10-06-2026
Traefik v3.7.5 is out now. Kubernetes users and Gateway API deployments benefit from provider robustness and stricter backendRef validation.
See the Traefik GitHub release for full notes and upgrade instructions.
What’s in this release
- [k8s/ingress-nginx] Traefik now skips Ingress resources when resolving an auth secret fails, avoiding partial or broken configurations.
- [k8s/gatewayapi] Gateway API backendRefs with an explicit backend namespace are rejected when they would reference resources across providers, enforcing provider isolation for backendRefs.namespace.
- [tls] Fixes for TLS routing and SNI: routers that share the same host but use different TLS options on different entryPoints are handled correctly, and snicheck no longer fails for routers with no hosts configured.
Upgrade notes
- Gateway API behaviour change: backendRefs.namespace checks are stricter. Review Gateway backendRef.namespace entries and ensure they do not reference resources across providers before upgrading.
- Ingress handling: if auth-secret resolution fails Traefik will skip the Ingress. Confirm required secrets exist and are readable to avoid silently missing routes.
Share your experience with the upgrade or report regressions on the Traefik GitHub so the community and maintainers can follow up.
