« Changelog History


consul v1.8.1 Release Notes

Release Date: 2020-07-30 // over 3 years ago

  • 🔋 FEATURES:

    👌 IMPROVEMENTS:

    • acl: allow auth methods created in the primary datacenter to optionally create global tokens [GH-7899]
    • agent: Allow to restrict servers that can join a given Serf Consul cluster. [GH-7628]
    • agent: new configuration options allow ratelimiting of the agent-cache: cache.entry_fetch_rate and cache.entry_fetch_max_burst. [GH-8226]
    • api: Added methods to allow passing query options to leader and peers endpoints to mirror HTTP API [GH-8395]
    • 🔧 auto_config: when configuring auto_config, connect is turned on automatically [GH-8433]
    • connect: various changes to make namespaces for intentions work more like for other subsystems [GH-8194]
    • connect: Append port number to expected ingress hosts [GH-8190]
    • 👍 connect: add support for envoy 1.15.0 and drop support for 1.11.x [GH-8424]
    • 👍 connect: support Envoy v1.14.4, v1.13.4, v1.12.6 [GH-8216]
    • dns: Improve RCODE of response when query targets a non-existent datacenter. [GH-8102],[GH-8218]
    • version: The version CLI subcommand was altered to always show the git revision the binary was built from on the second line of output. Additionally the command gained a -format flag with the option now of outputting the version information in JSON form. NOTE This change has the potential to break any parsing done by users of the version commands output. In many cases nothing will need to be done but it is possible depending on how the output is parsed. [GH-8268]

    🛠 BUGFIXES:

    • 🛠 agent: Fixed a bug where Consul could crash when verify_outgoing was set to true but no client certificate was used. [GH-8211]
    • 🔒 agent: Fixed an issue with lock contention during RPCs when under load while using the Prometheus metrics sink. [GH-8372]
    • 🛠 auto_encrypt: Fixed an issue where auto encrypt certificate signing wasn't using the connect signing rate limiter. [GH-8211]
    • 🛠 auto_encrypt: Fixed several issues around retrieving the first TLS certificate where it would have the wrong CN and SANs. This was being masked by a second bug (also fixed) causing that certificate to immediately be discarded with a second certificate request being made afterwards. [GH-8211]
    • ⚡️ auto_encrypt: Fixed an issue that caused auto encrypt certificates to not be updated properly if the agents token was changed and the old token was deleted. [GH-8311]
    • autopilot: (Consul Enterprise only) Fixed an issue where using autopilot with redundancy zones wouldn't demote extra voters in a zone to match the "one voter per zone" desired state when rebalancing.
    • connect: fix crash that would result if a mesh or terminating gateway's upstream has a hostname as an address and no healthy service instances available. [GH-8158]
    • 🛠 connect: Fixed issue where specifying a prometheus bind address would cause ingress gateways to fail to start up [GH-8371]
    • gossip: Avoid issue where two unique leave events for the same node could lead to infinite rebroadcast storms [GH-8343]
    • router: Mark its own cluster as healthy when rebalancing. [GH-8406]
    • snapshot: (Consul Enterprise only) Fixed a regression when using Azure blob storage.
    • xds: version sniff envoy and switch regular expressions from 'regex' to 'safe_regex' on newer envoy versions [GH-8222]