All Versions
80
Latest Version
Avg Release Cycle
28 days
Latest Release
5 days ago

Changelog History
Page 4

  • v1.3.1

    November 13, 2018

    🐛 BUG FIXES:

    • api: Fix issue introduced in 1.3.0 where catalog queries with tag filters change behaviour during upgrades from 1.2.x or earlier. (Back-ported from 1.4.0 release candidate.) [GH-4944].
  • v1.3.0

    October 11, 2018

    🔋 FEATURES:

    • 👍 Connect Envoy Support: This release includes support for using Envoy as a Proxy with Consul Connect (Beta). Read the announcement blog post or reference documentation for more detail.
    • Sidecar Service Registration: As part of the ongoing Connect Beta we add a new, more convenient way to register sidecar proxies from within a regular service definition.
    • 🗄 Deprecating Managed Proxies: The Connect Beta launched with a feature named "managed proxies". These will no longer be supported in favour of the simpler sidecar service registration. Existing functionality will not be removed until a later major release but will not be supported with fixes. See the deprecation notice for full details.
    • 🆕 New command consul services register and consul services deregister for registering and deregistering services from the command line. [GH-4732]
    • 👍 api: Service discovery endpoints now support caching results in the local agent. [GH-4541]
    • 🔧 dns: Added SOA configuration for DNS settings. [GH-4713]

    👌 IMPROVEMENTS:

    • 💻 ui: Improve layout of node 'cards' by restricting the grid layout to a maximum of 4 columns [GH-4761]
    • 💻 ui: Load the TextEncoder/Decoder polyfill dynamically so it's not downloaded to browsers with native support [GH-4767]
    • 👍 cli: consul connect proxy now supports a --sidecar-for option to allow simple integration with new sidecar service registrations.
    • 👍 api: /health and /catalog endpoints now support filtering by multiple tags [GH-1781]
    • ⚡️ agent: Only update service ModifyIndex when it's state actually changes. This makes service watches much more efficient on large clusters. [GH-4720]
    • config: Operators can now enable script checks from local config files only. [GH-4711]

    🐛 BUG FIXES:

    • agent: (Consul Enterprise) Fixed an issue where the non_voting_server setting could be ignored when bootstrapping the cluster. [GH-4699]
    • 🔒 cli: forward SIGTERM to child process of 'lock' and 'watch' subcommands [GH-4737]
    • connect: Fix to ensure leaf certificates for a service are not shared between clients on the same agent using different ACL tokens [GH-4736]
    • 💻 ui: Ensure service names that contain slashes are displayable [GH-4756]
    • watch: Fix issue with HTTPs only agents not executing watches properly. [GH-4727]
  • v1.2.4

    November 27, 2018

    🔒 SECURITY:

  • v1.2.3

    September 13, 2018

    🔋 FEATURES:

    • agent: New Cloud Auto-join provider: Kubernetes (K8S) [GH-4635]
    • 👍 http: Added support for "Authorization: Bearer" head in addition to the X-Consul-Token header. [GH-4483]
    • dns: Added a way to specify SRV weights for each service instance to allow weighted DNS load-balancing. [GH-4198]
    • 👀 dns: Include EDNS-ECS options in EDNS responses where appropriate: see RFC 7871 [GH-4647]
    • 💻 ui: Add markers/icons for external sources [GH-4640]

    👌 IMPROVEMENTS:

    • 💻 ui: Switch to fullscreen layout for lists and detail, left aligned forms [GH-4435]
    • connect: TLS certificate readiness now performs x509 certificate verification to determine whether the cert is usable. [GH-4540]
    • 0️⃣ ui: The syntax highlighting/code editor is now on by default [GH-4651]
    • 💻 ui: Fallback to showing Node.Address if Service.Address is not set [GH-4579]
    • ✅ gossip: Improvements to Serf and memberlist improving gossip stability on very large clusters (over 35k tested) [GH-4511]

    🐛 BUG FIXES:

    • agent: Avoid returning empty data on startup of a non-leader server [GH-4554]
    • agent: Fixed a panic when serf_wan port was -1 but a reconnect_timeout_wan value was set. [GH-4515]
    • 🛠 agent: Fixed a problem where errors regarding DNS server creation where never shown. [GH-4578]
    • 🏗 agent: Start with invalid http configuration again, even though the build-in proxy for connect won't start in that case. [GH-4655]
    • catalog: Allow renaming nodes with IDs. [GH-3974],[GH-4413],[GH-4415]
    • dns: Fixes a bug with the DNS recursor, where we would not move onto the next provided recursor if we encounter a SERVFAIL or REFUSED status. [GH-4461]
    • 🛠 server: Fixed a memory leak in blocking queries against /event/list. [GH-4482]
    • 🛠 server: Fixed an issue where autopilot health checking could mistakenly mark healthy servers as failed, causing a non-voting server to be promoted unnecessarily. [GH-4528]
    • 📇 snapshot: Fixed a bug where node metadata wasn't being included in or restored from the snapshots. [GH-4524]
    • 🛠 connect: Fixed a bug where managed proxy instances registered for instances with different name and ID and with restrictive ACL would not be allowed. [GH-4619]
    • ⏪ connect: Fixed a bug where built-in CA state was not correctly restored from a snapshot [GH-4535]
    • 🚑 connect: Fixed a bug where Checks with deregister_critical_service_after would deregister the service but not remove the managed proxy [[GH-4649](github.com/hashicorp/consul/pull/4649)]
    • 🔧 connect: Fixed a bug that would output an error about pruning CAs every hour on the leader and might cause some CA configurations not to be pruned correctly [GH-4669]
    • ⚡️ raft: Update raft vendoring to pull in a fix for a potential memory leak. [GH-4539]
    • license: (Consul Enterprise) Fix an issue with the license not being reloaded from snapshots.
    • 📦 license: (Consul Enterprise) Fix an issue with encoding/decoding of the license package type from the /v1/operator/license endpoint.
    • cli: Correctly exit with error code 1 when failing to list DCs with the catalog command [[GH-4583]]
    • 💻 ui: Improve layout on screens of a large portrait orientation [GH-4564]
    • 💻 ui: Various browser layout bugs for various vendors/setups [GH-4608] [GH-4613] [GH-4615]
  • v1.2.2

    July 30, 2018

    🔒 SECURITY:

    • 0️⃣ acl: Fixed an issue where writes operations on the Keyring and Operator were being allowed with a default allow policy even when explicitly denied in the policy. [GH-4378]

    🔋 FEATURES:

    • Alias Checks: Alias checks allow a service or node to alias the health status of another service or node in the cluster. [PR-4320]
    • agent: New Cloud Auto-join providers: vSphere and Packet.net. [GH-4412]
    • cli: Added -serf-wan-port, -serf-lan-port, and -server-port flags to CLI for cases where these can't be specified in config files and -hcl is too cumbersome. [GH-4353]
    • 🔧 connect: The TTL of leaf (service) certificates in Connect is now configurable. [GH-4400]

    👌 IMPROVEMENTS:

    • 🌲 proxy: With -register flag, heartbeat failures will only log once service registration succeeds. [GH-4314]
    • http: 1.0.3 introduced rejection of non-printable chars in HTTP URLs due to a security vulnerability. Some users who had keys written with an older version which are now dissallowed were unable to delete them. A new config option disable_http_unprintable_char_filter is added to allow those users to remove the offending keys. Leaving this new option set long term is strongly discouraged as it bypasses filtering necessary to prevent some known vulnerabilities. [GH-4442]
    • 🔧 agent: Allow for advanced configuration of some gossip related parameters. [GH-4058]
    • 🔧 agent: Make some Gossip tuneables configurable via the config file [GH-4444]
    • 💻 ui: Included searching on .Tags when using the freetext search field. [GH-4383]
    • 💻 ui: Service.ID's are now shown in the Service detail page and (only if it is different from the service name) the Node Detail > [Services] tab. [GH-4387]

    🐛 BUG FIXES:

    • acl/connect: Fix an issue that was causing managed proxies not to work when ACLs were enabled. [GH-4441]
    • connect: Fix issue with managed proxies and watches attempting to use a client addr that is 0.0.0.0 or :: [GH-4403]
    • 🔧 connect: Allow Native and Unmanaged proxy configurations via config file [GH-4443]
    • connect: Fix bug causing 100% CPU on agent when Connect is disabled but a proxy is still running [GH-4421]
    • proxy: Don't restart proxies setup in a config file when Consul restarts [GH-4407]
    • 💻 ui: Display the Service.IP address instead of the Node.IP address in the Service detail view. [GH-4410]
    • 💻 ui: Watch for trailing slash stripping 301 redirects and forward the user to the correct location. [GH-4373]
    • 🛠 connect: Fixed an issue in the connect native HTTP client where it failed to resolve service names. [GH-4392]
  • v1.2.1

    July 12, 2018

    👌 IMPROVEMENTS:

    • acl: Prevented multiple ACL token refresh operations from occurring simultaneously. [GH-3524]
    • 🚤 acl: Add async-cache down policy mode to always do ACL token refreshes in the background to reduce latency. [GH-3524]
    • proxy: Pass through HTTP client env vars to managed proxies so that they can connect back to Consul over HTTPs when not serving HTTP. [PR-4374]
    • connect: Persist intermediate CAs on leader change. [PR-4379]

    🐛 BUG FIXES:

    • 📜 api: Intention APIs parse error response body for error message. [GH-4297]
    • agent: Intention read endpoint returns a 400 on invalid UUID [GH-4297]
    • 🔧 agent: Service registration with "services" does not error on Connect upstream configuration. [GH-4308]
    • dns: Ensure that TXT RRs dont get put in the Answer section for A/AAAA queries. [GH-4354]
    • dns: Ensure that only 1 CNAME is returned when querying for services that have non-IP service addresses. [PR-4328]
    • 🔒 api: Fixed issue where Lock and Semaphore would return earlier than their requested timeout when unable to acquire the lock. [GH-4003], [GH-3262], [GH-2399]
    • watch: Fix issue with HTTPs only agents not executing watches properly [GH-4358]
    • agent: Managed proxies that bind to 0.0.0.0 now get a health check on a sane IP [GH-4301]
    • 🛠 server: (Consul Enterprise) Fixed an issue causing Consul to panic when network areas were used
    • 🛠 license: (Consul Enterprise) Fixed an issue causing the snapshot agent to log erroneous licensing errors
  • v1.2.0

    June 26, 2018

    🔋 FEATURES:

    • Connect Feature Beta: This version includes a major new feature for Consul named Connect. Connect enables secure service-to-service communication with automatic TLS encryption and identity-based authorization. For more details and links to demos and getting started guides, see the announcement blog post.
      • Connect must be enabled explicitly in configuration so upgrading a cluster will not affect any existing functionality until it's enabled.
      • This is a Beta feature, we don't recommend enabling this in production yet. Please see the documentation for more information.
    • dns: Enable PTR record lookups for services with IPs that have no registered node [PR-4083]
    • 💻 ui: Default to serving the new UI. Setting the CONSUL_UI_LEGACY environment variable to 1 or true will revert to serving the old UI

    👌 IMPROVEMENTS:

    • agent: A Consul user-agent string is now sent to providers when making retry-join requests [GH-4013]
    • client: Add metrics for failed RPCs PR-4220
    • 🔧 agent: Add configuration entry to control including TXT records for node meta in DNS responses PR-4215
    • 🔧 client: Make RPC rate limit configuration reloadable [GH-4012]

    🐛 BUG FIXES:

    • 🛠 agent: Fixed an issue where watches were being duplicated on reload. [GH-4179]
    • 🛠 agent: Fixed an issue with Agent watches on a HTTPS only agent would fail to use TLS. [GH-4076]
    • 🛠 agent: Fixed bug that would cause unnecessary and frequent logging yamux keepalives [GH-3040]
    • dns: Re-enable full DNS compression [GH-4071]
  • v1.1.1

    November 27, 2018

    🔒 SECURITY:

  • v1.1.0

    May 08, 2019

    🔋 FEATURES:

    • 💻 UI: The web UI has been completely redesigned and rebuilt and is in an opt-in beta period. 💻 Setting the CONSUL_UI_BETA environment variable to 1 or true will replace the existing UI 🚀 with the new one. The existing UI will be deprecated and removed in a future release. [GH-4086]
    • 👀 api: Added support for Prometheus client format in metrics endpoint with ?format=prometheus (see docs) [GH-4014]
    • agent: New Cloud Auto-join provider: Joyent Triton. [GH-4108]
    • agent: (Consul Enterprise) Implemented license management with license propagation within a datacenter.

    💥 BREAKING CHANGES:

    • 🚚 agent: The following previously deprecated fields and config options have been removed [GH-4097]:
      • CheckID has been removed from config file check definitions (use id instead).
      • script has been removed from config file check definitions (use args instead).
      • enableTagOverride is no longer valid in service definitions (use enable_tag_override instead).
      • The deprecated set of metric names (beginning with consul.consul.) has been removed along with the enable_deprecated_names option from the metrics configuration.

    👌 IMPROVEMENTS:

    • 🐎 agent: Improve DNS performance on large clusters [GH-4036]
    • agent: start_join, start_join_wan, retry_join, retry_join_wan config params now all support go-sockaddr templates [GH-4102]
    • server: Added new configuration options raft_snapshot_interval and raft_snapshot_threshold to allow operators to configure how often servers take raft snapshots. The default values for these have been tuned for large and busy clusters with high write load. [GH-4105]

    🐛 BUG FIXES:

    • 🚦 agent: Only call signal.Notify once during agent startup [PR-4024]
    • 👍 agent: Add support for the new Service Meta field in agent config [GH-4045]
    • 👍 api: Add support for the new Service Meta field in API client [GH-4045]
    • ⚡️ agent: Updated serf library for two bug fixes - allow enough time for leave intents to propagate [GH-510] and preventing a deadlock [GH-507]
    • 🚧 agent: When node-level checks (e.g. maintenance mode) were deleted, some watchers currently in between blocking calls may have missed the change in index. See [GH-3970]
  • v1.0.8

    November 27, 2018

    🔒 SECURITY: