Fix a bug when configuring an add_headers directive named Host the header is not set for v1/internal/ui/metrics-proxy/ endpoint.
xds: Envoy now inserts x-forwarded-client-cert for incoming proxy connections.
sentinel: (Enterprise Only) Sentinel now uses SHA256 to generate policy ids.
This prevents the agent fromĮxiting if the given DogStatsD DNS name is unresolvable, for example. Retry on failed connection to any telemetry backend.
config: introduce telemetry.retry_failed_connection in agent configuration to.
xds: Add the ability to invoke AWS Lambdas through sidecar proxies.
kvs: Fixed a bug where query options were not being applied to KVS.Get RPC operations.
Critical ops mod 0.9.2 upgrade#
serf: upgrade serf to v0.9.8 which fixes a bug that crashes Consul when serf keyrings are listed.
raft: upgrade to v1.3.8 which fixes a bug where non cluster member can still be able to participate in an election.
proxycfg: Fixed a minor bug that would cause configuring a terminating gateway to watch too many service resolvers and waste resources doing filtering.
acl: Fixed a bug where the ACL down policy wasn't being applied on remote errors from the primary datacenter.
ui: upgrade ember-composable-helpers to v5.x.
ui: removed external dependencies for serving UI assets in favor of Go's native embed capabilities.
telemetry: Added .saturation and .saturation metrics to measure approximate saturation of the Raft goroutines.
grpc: Add a new ServerDiscovery.WatchServers gRPC endpoint for being notified when the set of ready servers has changed.
connect: Added a max_inbound_connections setting to service-defaults for limiting the number of concurrent inbound connections to each service instance.
acl: Clarify node/service identities must be lowercase.
This was the only missing piece to ensure all mesh services are validated for a port (or socketpath) specification on catalog registration.
connect: add validation to ensure connect native services have a port or socketpath specified on catalog registration.
api: add the ability to specify a path prefix for when consul is behind a reverse proxy or API gateway.
api: merge-central-config query parameter support added to some catalog and health endpoints to view a fully resolved service definition (especially when not written into the catalog that way).
grpc: New gRPC service and endpoint to return the list of supported consul dataplane features.
grpc: New gRPC endpoint to return envoy bootstrap parameters.
ca: Leaf certificates can now be obtained via the gRPC API: Sign.
Agent also reports build date in log on startup. Extended /agent/self endpoint and consul version commands
agent: Added information about build date alongside other version information for Consul.
acl: It is now possible to login and logout using the gRPC API.
config-entry: Exporting a specific service name across all namespace is invalid.
api: merge-central-config query parameter support added to /catalog/node-services/:node-name API, to view a fully resolved service definition (especially when not written into the catalog that way).
xds: Fix a bug where terminating gateway upstream clusters weren't configured properly when the service protocol was http2.
xds: Fix a bug that resulted in Lambda services not using the payload-passthrough option as expected.
ui: Fix incorrect text on certain page empty states.
fix a bug that caused an error when creating grpc or http2 ingress gateway listeners with multiple services.