hashicorp/consul-k8s v0.46.0

on GitHub

0.46.0 (July 20, 2022)

IMPROVEMENTS:

• Control Plane
  • Update minimum go version for project to 1.18 [GH-1292]
• CLI
  • Update minimum go version for project to 1.18 [GH-1292]

FEATURES:

• [Experimental] Cluster Peering:
  • Add support for secret watchers on the Peering Acceptor and Peering Dialer controllers. [GH-1284]
  • Add support for version annotation on the Peering Acceptor and Peering Dialer controllers. [GH-1302]
  • Add validation webhooks for the Peering Acceptor and Peering Dialer CRDs [GH-1310]

IMPROVEMENTS:

• Control Plane
  • Added annotations consul.hashicorp.com/prometheus-ca-file, consul.hashicorp.com/prometheus-ca-path, consul.hashicorp.com/prometheus-cert-file, and consul.hashicorp.com/prometheus-key-file for configuring TLS scraping on Prometheus metrics endpoints for Envoy sidecars. To enable, set the cert and key file annotations along with one of the ca file/path annotations. [GH-1303]
  • Added annotations consul.hashicorp.com/consul-sidecar-user-volume and consul.hashicorp.com/consul-sidecar-user-volume-mount for attaching Volumes and VolumeMounts to the Envoy sidecar. Both should be JSON objects. [GH-1315]
• Helm
  • Added connectInject.annotations and syncCatalog.annotations values for setting annotations on connect inject and sync catalog deployments. [GH-775]
  • Added PodDisruptionBudget to the connect injector deployment which can be configured using the connectInject.disruptionBudget stanza. [GH-1316]

BUG FIXES:

• Helm
  • When using Openshift do not set securityContext in gossip-encryption-autogenerate job. [GH-1308]
• Control Plane
  • Fix missing RBAC permissions for the peering controllers to be able to update secrets. [GH-1359]
  • Fix a bug in the peering controller where we tried to read the secret from the cache right after creating it. [GH-1359]