Skip to content

v0.47.0

Compare
Choose a tag to compare
@hc-github-team-es-release-engineering hc-github-team-es-release-engineering released this 12 Aug 13:41
12cb347

0.47.0 (August 12, 2022)

FEATURES:

  • Transparent Proxy Egress
    • Add support for Destinations on the Service Defaults CRD. [GH-1352]
  • CLI:
    • Add consul-k8s proxy list command for displaying Pods running Envoy managed by Consul. [GH-1271]
    • Add consul-k8s proxy read podname command for displaying Envoy configuration for a given Pod. [GH-1271]
  • [Experimental] Cluster Peering:
    • Add support for ACLs and TLS. [GH-1343] [GH-1366]
    • Add support for Load Balancers or external addresses in front of Consul servers for peering stream.
      • Support new expose-servers Kubernetes Service deployed by Helm chart to expose the Consul servers, and using the service address in the peering token. [GH-1378]
      • Support non-default partitions by using externalServers.hosts as the server addresses in the peering token. [GH-1384]
      • Support arbitrary addresses as the server addresses in the peering token via global.peering.tokenGeneration.source="static" and global.peering.tokenGeneration.static=["sample-server-address:8502"]. [GH-1392]
    • Generate new peering token only on user-triggered events. [GH-1399]

IMPROVEMENTS:

  • Helm
    • Bump default Envoy version to 1.22.4. [GH-1413]
    • Added support for Consul API Gateway to read ReferenceGrant custom resources. This will require either installing Consul API Gateway CRDs from the upcoming v0.4.0 release with kubectl apply --kustomize "github.com/hashicorp/consul-api-gateway/config/crd?ref=v0.4.0" or manually installing the ReferenceGrant CRD from the Gateway API v0.5 Experimental Channel when setting apiGateway.enabled=true [GH-1299]

BUG FIXES:

  • Helm
    • Fix permissions in client-daemonset and server-statefulset when using extra-config volumes to prevent errors on OpenShift. [GH-1307]