1.10.2 (August 27, 2021)
SECURITY:
- rpc: authorize raft requests CVE-2021-37219 [GH-10931]
FEATURES:
- connect: add support for unix domain socket config via API/CLI [GH-10758]
- ui: Adding support in Topology view for Routing Configurations [GH-10872]
- ui: Create Routing Configurations route and page [GH-10835]
- ui: Splitting up the socket mode and socket path in the Upstreams Instance List [GH-10581]
IMPROVEMENTS:
- areas: (Enterprise only) Add 15s timeout to opening streams over pooled connections.
- areas: (Enterprise only) Apply backpressure to area gossip packet ingestion when more than 512 packets are waiting to be ingested.
- areas: (Enterprise only) Make implementation of WriteToAddress non-blocking to avoid slowing down memberlist's packetListen routine.
- checks: Add Interval and Timeout to API response. [GH-10717]
- ci: make changelog-checker only validate PR number against main base [GH-10844]
- ci: upgrade to use Go 1.16.7 [GH-10856]
- deps: update to gogo/protobuf v1.3.2 [GH-10813]
- proxycfg: log correlation IDs for the proxy configuration snapshot's blocking queries. [GH-10689]
BUG FIXES:
- acl: fixes a bug that prevented the default user token from being used to authorize service registration for connect proxies. [GH-10824]
- ca: fixed a bug when ca provider fail and provider state is stuck in
INITIALIZINGstate. [GH-10630] - ca: report an error when setting the ca config fail because of an index check. [GH-10657]
- cli: Ensure the metrics endpoint is accessible when Envoy is configured to use
a non-default admin bind address. [GH-10757] - cli: Fix a bug which prevented initializing a watch when using a namespaced
token. [GH-10795] - cli: Fix broken KV import command on Windows. [GH-10820]
- connect: ensure SAN validation for prepared queries validates against all possible prepared query targets [GH-10873]
- connect: fix crash that would result from multiple instances of a service resolving service config on a single agent. [GH-10647]
- connect: proxy upstreams inherit namespace from service if none are defined. [GH-10688]
- dns: fixes a bug with edns truncation where the response could exceed the size limit in some cases. [GH-10009]
- grpc: ensure that streaming gRPC requests work over mesh gateway based wan federation [GH-10838]
- http: log cancelled requests as such at the INFO level, instead of logging them as errored requests. [GH-10707]
- streaming: set the default wait timeout for health queries [GH-10707]
- txn: fixes Txn.Apply to properly authorize service registrations. [GH-10798]
- ui: Disabling policy form fields from users with 'read' permissions [GH-10902]
- ui: Fix Health Checks in K/V form Lock Sessions Info section [GH-10767]
- ui: Fix dropdown option duplication in the new intentions form [GH-10706]
- ui: Hide all metrics for ingress gateway services [GH-10858]
- ui: Properly encode non-URL safe characters in OIDC responses [GH-10901]
- ui: fixes a bug with some service failovers not showing the routing tab visualization [GH-10913]