1.10.8 (February 11, 2022)
SECURITY:
- agent: Use SHA256 instead of MD5 to generate persistence file names.
IMPROVEMENTS:
- raft: Consul leaders will attempt to transfer leadership to another server as part of gracefully leaving the cluster. [GH-11376]
- sentinel: (Enterprise Only) Sentinel now uses SHA256 to generate policy ids
BUG FIXES:
- Fix a data race when a service is added while the agent is shutting down.. [GH-12302]
- areas: (Enterprise Only) Fixes a bug when using Yamux pool ( for servers version 1.7.3 and later), the entire pool was locked while connecting to a remote location, which could potentially take a long time. [GH-1368]
- config-entry: fix a panic when creating an ingress gateway config-entry and a proxy service instance, where both provided the same upstream and downstrem mapping. [GH-12277]
- config: include all config errors in the error message, previously some could be hidden. [GH-11918]
- connect: fixes bug where passthrough addressses for transparent proxies dialed directly weren't being cleaned up. [GH-12223]
- memberlist: fixes a bug which prevented members from joining a cluster with
large amounts of churn [GH-253] [GH-12047] - snapshot: the
snapshot savecommand now saves the snapshot with read permission for only the current user. [GH-11918] - xds: allow only one outstanding delta request at a time [GH-12236]
- xds: fix for delta xDS reconnect bug in LDS/CDS [GH-12174]
- xds: prevents tight loop where the Consul client agent would repeatedly re-send config that Envoy has rejected. [GH-12195]