1.1.2 (June 5, 2023)
SECURITY:
- Bump Dockerfile base image for RedHat UBI
consul-k8s-control-planeimage toubi-minimal:9.2. [GH-2204] - Bump
controller-runtimeto address CVEs in dependencies. [GH-2226] - Upgrade to use Go 1.20.4. This resolves vulnerabilities CVE-2023-24537(
go/scanner), CVE-2023-24538(html/template),
CVE-2023-24534(net/textproto) and CVE-2023-24536(mime/multipart). Also,golang.org/x/nethas been updated to v0.7.0 to resolve CVEs CVE-2022-41721, CVE-2022-27664 and CVE-2022-41723 [GH-2104]
FEATURES:
- Add support for consul-telemetry-collector to forward envoy metrics to an otelhttp compatible receiver or HCP [GH-2134]
- consul-telemetry-collector: Configure envoy proxy config during registration when consul-telemetry-collector is enabled. [GH-2143]
- sync-catalog: add ability to sync hostname from a Kubernetes Ingress resource to the Consul Catalog during service registration. [GH-2098]
IMPROVEMENTS:
- cli: Add
consul-k8s config readcommand that returns the helm configuration in yaml format. [GH-2078] - cli: add consul-telemetry-gateway allow-all intention for -demo [GH-2262]
- cli: update cloud preset to enable telemetry collector [GH-2205]
- consul-telemetry-collector: add acceptance tests for consul telemetry collector component [GH-2195]
BUG FIXES:
- crd: fix bug on service intentions CRD causing some updates to be ignored. [GH-2194]
- api-gateway: fix issue where the API Gateway controller is unable to start up successfully when Vault is configured as the secrets backend [GH-2083]
- control-plane: add support for idleTimeout in the Service Router config [GH-2156]
- control-plane: fix issue with json tags of service defaults fields EnforcingConsecutive5xx, MaxEjectionPercent and BaseEjectionTime. [GH-2160]
- control-plane: fix issue with multiport pods crashlooping due to dataplane port conflicts by ensuring dns redirection is disabled for non-tproxy pods [GH-2176]
- helm: add missing
$HOST_IPenvironment variable to to mesh gateway deployments. [GH-1808] - sync-catalog: fix issue where the sync-catalog ACL token were set with an incorrect ENV VAR. [GH-2068]