consul v1.6.2 Release Notes

Release Date: 2019-11-13 // over 4 years ago
  • ๐Ÿ”’ SECURITY

    • โšก๏ธ Updated to compile with Go 1.12.13 which includes a fix for CVE-2019-17596 in [Go 1.12.11] [GH-6319]

    ๐Ÿ”‹ FEATURES

    • agent: store check type in catalog [GH-6561]
    • โšก๏ธ agent: update force-leave to allow for complete removal of members [GH-6571]
    • โšก๏ธ agent: updates to the agent token trigger anti-entropy full syncs [GH-6577]
    • ๐Ÿ‘ snapshot agent (Consul Enterprise): Added support for saving snapshots to Google Cloud Storage.
    • connect: Added proxy config stanza to allow exposing HTTP paths through Envoy for non-Connect-enabled services [GH-5396]

    ๐Ÿ‘Œ IMPROVEMENTS

    • โฌ†๏ธ licensing (Consul Enterprise): Increase initial server temporary license duration to 6 hours to allow for longer upgrades/migrations.
    • server: ensure the primary datacenter and ACL datacenter match [GH-6634]
    • โœ… sdk: ignore panics due to stray goroutines logging after a test completes [GH-6632]
    • agent: allow mesh gateways to initialize even if there are no connect services registered yet [GH-6576]
    • ๐ŸŽ agent: endpoint performance improvements, Txn endpoint in particular. [GH-6680]
    • โœ… sdk: add NewTestServerT, deprecate NewTestServer in testutil to prevent nil point dereference [GH-6761]
    • agent: auto_encrypt provided TLS certificates can now be used to enable HTTPS on clients [GH-6489]
    • โšก๏ธ sentinel (Consul Enterprise): update to v0.13.0, see Sentinel changelog for more details

    ๐Ÿ› BUG FIXES

    • ๐Ÿš€ ARM release binaries: Starting with v1.6.2, Consul will ship three separate versions of ARM builds. The previous ARM binaries of Consul could potentially crash due to the way the Go runtime manages internal pointers to its Go routine management constructs and how it keeps track of them especially during signal handling. From v1.6.2 forward, it is recommended to use:
      • consul_{version}_linux_armelv5.zip for all 32-bit armel systems
      • consul_{version}_linux_armhfv6.zip for all armhf systems with v6+ architecture
      • consul_{version}_linux_arm64.zip for all v8 64-bit architectures
    • ๐Ÿ“œ agent: Parse the HTTP Authorization header as case-insensitive. [GH-6568]
    • agent: minimum quorum check added to Autopilot with minQuorum option [GH-6654]
    • agent: cache notifications work after error if the underlying RPC returns index=1 [GH-6547]
    • agent: tolerate more failure scenarios during service registration with central config enabled [GH-6472]
    • ๐Ÿšš cache: remove data race in agent cache [GH-6470]
    • connect: connect CA Roots in secondary datacenters should use a SigningKeyID derived from their local intermediate [GH-6513]
    • connect: don't colon-hex-encode the AuthorityKeyId and SubjectKeyId fields in connect certs [GH-6492]
    • connect: intermediate CA certs generated with the vault provider lack URI SANs [GH-6491]
    • ๐Ÿ”€ debug: Fix a bug in sync.WaitGroup usage. [GH-6649]
    • xds: tcp services using the discovery chain should not assume RDS during LDS [GH-6623]
    • ๐Ÿ’ป ui: Fix a bug where switching datacenters using the datacenter menu would lead to an empty service listing [GH-6555]