1.10.0-beta2 (May 05, 2021)
BREAKING CHANGES:
- connect: Disallow wildcard as name for service-defaults. [GH-10069]
FEATURES:
- cli: Add additional flags to the
consul connect redirect-traffic
command to allow excluding inbound and outbound ports,
outbound CIDRs, and additional user IDs from traffic redirection. [GH-10134] - cli: Automatically exclude ports from
envoy_prometheus_bind_addr
,envoy_stats_bind_addr
, andListenerPort
fromExpose
config
from inbound traffic redirection rules ifproxy-id
flag is provided to theconsul connect redirect-traffic
command. [GH-10134] - connect: add support for unix domain sockets addresses for service upstreams and downstreams [GH-9981]
- sdk: Allow excluding inbound and outbound ports, outbound CIDRs, and additional user IDs from traffic redirection in the
iptables
package. [GH-10134] - xds: exclusively support the Incremental xDS protocol when using xDS v3 [GH-9855]
IMPROVEMENTS:
- acl: Give more descriptive error if auth method not found. [GH-10163]
- cli: snapshot inspect command can now inspect raw snapshots from a server's data
dir. [GH-10089] - connect: rename cluster config entry to mesh. [GH-10127]
- connect: restrict transparent proxy mode to only match on the tagged virtual IP address. [GH-10162]
- connect: update supported envoy versions to 1.18.2, 1.17.2, 1.16.3, 1.15.4 [GH-10101]
- raft: allow reloading of raft trailing logs and snapshot timing to allow recovery from some replication failure modes.
telemetry: add metrics and documentation for monitoring for replication issues. [GH-10129] - streaming: change
use_streaming_backend
to default to true so that streaming is used by default when it is supported. [GH-10149] - telemetry: Add new metrics for status of secondary datacenter replication. [GH-10073]
- ui: Added CRD popover 'informed action' for intentions managed by CRDs [GH-10100]
- ui: Added humanized formatting to lock session durations [GH-10062]
- ui: Adding a notice about how TransparentProxy mode affects the Upstreams list at the top of tab view [GH-10136]
- ui: Updating the wording for the banner and the popover for a service with an upstream that is not explicitly defined. [GH-10133]
- ui: updates the ui with the new consul brand assets [GH-10081]
- xds: ensure that all envoyproxy/go-control-plane protobuf symbols are linked into the final binary [GH-10131]
BUG FIXES:
- cli: snapshot inspect command would panic on invalid input. [GH-10091]
- memberlist: fixes a couple bugs which allowed malformed input to cause a crash in a Consul
client or server. [GH-10161] - streaming: fixes a bug that would cause context cancellation errors when a cache entry expired while requests were active. [GH-10112]
- telemetry: fixes a bug with Prometheus metrics where Gauges and Summaries were incorrectly
being expired. [GH-10161] - ui: Adding conditional to prevent Service Mesh from breaking when there are no Upstreams [GH-10122]
- ui: Fix text searching through upstream instances. [GH-10151]
- ui: Removes the extra rendering of namespace in service upstream list [GH-10152]
- ui: Update conditional for topology empty state [GH-10124]