IMPROVEMENTS:
-
Consul client DaemonSet can now use a hostPath mount
for its data directory by setting theclient.dataDirectoryHostPath
value.
This setting is currently necessary to ensure that when a Consul client Pod is deleted,
e.g. during a Consul version upgrade, it does not lose its Connect service
registrations. In the next version, we plan to have services automatically
re-register which will remove the need for this. [GH-298]Security Warning: If using this setting, Pod Security Policies must be enabled on your cluster
and in this Helm chart (via theglobal.enablePodSecurityPolicies
setting)
to prevent other Pods from mounting the same host path and gaining
access to all of Consul's data. Consul's data is not encrypted at rest. -
New configuration option
client.updateStrategy
allows setting the update
strategy for the Client DaemonSet. [GH-298] -
New configuration option
client.dnsPolicy
allows setting the DNS
policy for the Client DaemonSet. [GH-298]