consul v1.9.0-beta2 Release Notes

Release Date: 2020-11-07 // over 3 years ago
  • 1.9.0-beta2 (November 07, 2020)

    ๐Ÿ’ฅ BREAKING CHANGES:

    • sentinel: (Consul Enterprise only) update to v0.16.0, which replaces whitelist and blacklist with allowlist and denylist

    ๐Ÿ”’ SECURITY:

    • ๐Ÿ›  Fix Consul Enterprise Namespace Config Entry Replication DoS. Previously an operator with service:write ACL permissions in a Consul Enterprise cluster could write a malicious config entry that caused infinite raft writes due to issues with the namespace replication logic. [CVE-2020-25201] [GH-9024]

    ๐Ÿ”‹ FEATURES:

    • agent: Add a new RPC endpoint for streaming cluster state change events to clients.
    • telemetry: add initialization and definition for non-expiring key metrics in Prometheus [GH-9088]

    ๐Ÿ‘Œ IMPROVEMENTS:

    • agent: add path_allowlist config option to restrict metrics proxy queries [GH-9059]
    • agent: protect the metrics proxy behind ACLs [GH-9099]
    • ui: add dashboard_url_template config option for external dashboard links [GH-9002]

    ๐Ÿ› BUG FIXES:

    • ๐Ÿ›  api: Fixed a bug where the Check.GRPCUseTLS field could not be set using snake case. [GH-8771]
    • connect: fix connect sidecars registered via the API not being automatically deregistered with their parent service after an agent restart by persisting the LocallyRegisteredAsSidecar property. [GH-8924]
    • ๐Ÿ’ป ui: hide metrics for ingress gateways until full support can be implemented [GH-9081]
    • ๐Ÿ’ป ui: only show topology tab for services that exist [GH-9008]