consul v1.11.0-beta2 Release Notes

Release Date: 2021-11-02 // over 2 years ago
  • ๐Ÿ’ฅ BREAKING CHANGES:

    • โฌ†๏ธ acl: The legacy ACL system that was deprecated in Consul 1.4.0 has been removed. Before upgrading you should verify that nothing is still using the legacy ACL system. See the Migrate Legacy ACL Tokens Learn Guide for more information. [GH-11232]

    ๐Ÿ‘Œ IMPROVEMENTS:

    • ๐Ÿ“œ agent: for various /v1/agent endpoints parse the partition parameter on the request [GH-11444]
    • ๐Ÿ”จ agent: refactor the agent delegate interface to be partition friendly [GH-11429]
    • ๐Ÿ‘ cli: Add -cas and -modify-index flags to the consul config delete command to support Check-And-Set (CAS) deletion of config entries [GH-11419]
    • โšก๏ธ cli: update consul members output to display partitions and sort the results usefully [GH-11446]
    • ๐Ÿ’… config: Allow ${} style interpolation for UI Dashboard template URLs [GH-11328]
    • ๐Ÿ‘ config: Support Check-And-Set (CAS) deletion of config entries [GH-11419]
    • connect: (Enterprise only) add support for dialing upstreams in remote partitions through mesh gateways. [GH-11431]
    • connect: (Enterprise only) updates ServiceRead and NodeRead to account for the partition-exports config entry. [GH-11433]
    • connect: ingress gateways may now enable built-in TLS for a subset of listeners. [GH-11163]
    • connect: service-resolver subset filters are validated for valid go-bexpr syntax on write [GH-11293]
    • โšก๏ธ connect: update supported envoy versions to 1.20.0, 1.19.1, 1.18.4, 1.17.4 [GH-11277]

    ๐Ÿ—„ DEPRECATIONS:

    • tls: With the upgrade to Go 1.17, the ordering of tls_cipher_suites will no longer be honored, and tls_prefer_server_cipher_suites is now ignored. [GH-11364]

    ๐Ÿ› BUG FIXES:

    • ๐Ÿ›  api: fixed backwards compatibility issue with AgentService SocketPath field. [GH-11318]
    • ๐Ÿ›  dns: Fixed an issue where on DNS requests made with .alt_domain response was returned as .domain [GH-11348]
    • raft: do not trigger an election if not part of the servers list. [GH-11375]
    • rpc: only attempt to authorize the DNSName in the client cert when verify_incoming_rpc=true [GH-11255]
    • telemetry: fixes a bug with Prometheus consul_autopilot_failure_tolerance metric where 0 is reported instead of NaN on follower servers. [GH-11399]
    • ๐Ÿ’ป ui: Ensure dc selector correctly shows the currently selected dc [GH-11380]
    • ๐Ÿ’ป ui: Ensure we filter tokens by policy when showing which tokens use a certain policy whilst editing a policy [GH-11311]