hashicorp/consul-k8s v1.6.0-rc1

on GitHub

1.6.0-rc1 (September 20, 2024)

SECURITY:

• Upgrade Go to use 1.22.7. This addresses CVE
  CVE-2024-34155 [GH-4313]

IMPROVEMENTS:

• dns-proxy: add the ability to deploy a DNS proxy within the kubernetes cluster that forwards DNS requests to the consul server and can be configured with an ACL token and make partition aware DNS requests. [GH-4300]
• sync-catalog: expose prometheus scrape metrics on sync-catalog pods [GH-4212]
• connect-inject: remove unnecessary resource permissions from connect-inject ClusterRole [GH-4307]
• helm: Exclude gke namespaces from being connect-injected when the connect-inject: default: true value is set. [GH-4333]

BUG FIXES:

• control-plane: add missing $HOST_IP environment variable to consul-dataplane sidecar containers [GH-4277]
• helm: Fix ArgoCD hooks related annotations on server-acl-init Job, they must be added at Job definition and not template level. [GH-3989]
• sync-catalog: Enable the user to purge the registered services by passing parent node and necessary filters. [GH-4255]