hashicorp/consul-k8s v0.47.0

on GitHub

0.47.0 (August 12, 2022)

FEATURES:

• Transparent Proxy Egress
  • Add support for Destinations on the Service Defaults CRD. [GH-1352]
• CLI:
  • Add consul-k8s proxy list command for displaying Pods running Envoy managed by Consul. [GH-1271]
  • Add consul-k8s proxy read podname command for displaying Envoy configuration for a given Pod. [GH-1271]
• [Experimental] Cluster Peering:
  • Add support for ACLs and TLS. [GH-1343] [GH-1366]
  • Add support for Load Balancers or external addresses in front of Consul servers for peering stream.
    • Support new expose-servers Kubernetes Service deployed by Helm chart to expose the Consul servers, and using the service address in the peering token. [GH-1378]
    • Support non-default partitions by using externalServers.hosts as the server addresses in the peering token. [GH-1384]
    • Support arbitrary addresses as the server addresses in the peering token via global.peering.tokenGeneration.source="static" and global.peering.tokenGeneration.static=["sample-server-address:8502"]. [GH-1392]
  • Generate new peering token only on user-triggered events. [GH-1399]

IMPROVEMENTS:

• Helm
  • Bump default Envoy version to 1.22.4. [GH-1413]
  • Added support for Consul API Gateway to read ReferenceGrant custom resources. This will require either installing Consul API Gateway CRDs from the upcoming v0.4.0 release with kubectl apply --kustomize "github.com/hashicorp/consul-api-gateway/config/crd?ref=v0.4.0" or manually installing the ReferenceGrant CRD from the Gateway API v0.5 Experimental Channel when setting apiGateway.enabled=true [GH-1299]

BUG FIXES:

• Helm
  • Fix permissions in client-daemonset and server-statefulset when using extra-config volumes to prevent errors on OpenShift. [GH-1307]