hashicorp/consul-k8s v0.40.0

on GitHub

0.40.0 (January 27, 2022)

BREAKING CHANGES:

• Helm
  • Some Consul components from the Helm chart have been renamed to ensure consistency in naming across the components.
    This will not be a breaking change if Consul components are not referred to by name externally. Check the PR for the list of renamed components. [GH-993][GH-1000]

FEATURES:

• Helm
  • Support Envoy 1.20.1. [GH-958]
  • Support Consul 1.11.2. [GH-976]
  • Support Consul API Gateway Controller deployment through the Helm chart and provision an ACL token to for API Gateway via server-acl-init [GH-925]

IMPROVEMENTS:

• Helm
  • Allow customization of terminationGracePeriodSeconds on the ingress gateways. [GH-947]
  • Support ui.dashboardURLTemplates.service value for setting dashboard URL templates. [GH-937]
  • Allow using dash-separated names for config entries when using kubectl. [GH-965]
  • Support Pod Security Policies with Vault integration. [GH-985]
  • Rename Consul resources to remove resource kind suffixes from the resource names to standardize resource names across the Helm chart. [GH-993]
  • Append -client to the Consul Daemonset name to standardize resource names across the Helm chart. [GH-1000]
• CLI
  • Show a diff when upgrading a Consul installation on Kubernetes [GH-934]
• Control Plane
  • Support the value $POD_NAME for the annotation consul.hashicorp.com/service-meta-* that will now be interpolated and set to the pod's name in the service's metadata. [GH-982]
  • Allow managing Consul sidecar resources via annotations. [GH-956]
  • Support using a backslash to escape commas in consul.hashicorp.com/service-tags annotation. [GH-983]
  • Avoid making unnecessary calls to Consul in the endpoints controller to improve application startup time when Consul is down. [GH-779]

BUG FIXES:

• Helm
  • Add PodDisruptionBudget Kind when checking for existing versions so that helm template can generate the right version. [GH-923]
• Control Plane
  • Admin Partitions (Consul Enterprise only): Attach anonymous-policy to the anonymous token from non-default partitions to support DNS queries when the default partition is on a VM. [GH-966]