hashicorp/consul v1.8.9-beta1

on GitHub

1.8.9-beta1 (February 11, 2021)

IMPROVEMENTS:

• cli: Add new -cluster-id and common-name to consul tls ca create to support creating a CA for Consul Connect. [GH-9585]
• connect: update supported envoy point releases to 1.14.6, 1.13.7, 1.12.7, 1.11.2 [GH-9739]
• license: (Enterprise only) Temporary client license duration was increased from 30m to 6h.
• server: use the presense of stored federation state data as a sign that we already activated the federation state feature flag [GH-9519]

BUG FIXES:

• cache: Prevent spamming the logs for days when a cached request encounters an "ACL not found" error. [GH-9738]
• connect: connect CA Roots in the primary datacenter should use a SigningKeyID derived from their local intermediate [GH-9428]
• proxycfg: avoid potential deadlock in delivering proxy snapshot to watchers. [GH-9689]
• server: When wan federating via mesh gateways after initial federation default to using the local mesh gateways unless the heuristic indicates a bypass is required. [GH-9528]
• server: When wan federating via mesh gateways only do heuristic primary DC bypass on the leader. [GH-9366]
• xds: deduplicate mesh gateway listeners by address in a stable way to prevent some LDS churn [GH-9650]
• xds: prevent LDS flaps in mesh gateways due to unstable datacenter lists; also prevent some flaps in terminating gateways as well [GH-9651]