github.com/hashicorp/consul

BUG FIXES:

• agent: Fixed a panic when using the Azure provider for retry-join. [GH-3875]
• agent: Fixed a panic when querying Consul's DNS interface over TCP. [GH-3877]

NOTE ON SKIPPED RELEASE 1.0.4:

We found [GH-3867] after cutting the 1.0.4 release and pushing the 1.0.4 release tag, so we decided to scuttle that release and push 1.0.5 instead with a fix for that issue.

SECURITY:

• dns: Updated DNS vendor library to pick up bug fix in the DNS server where an open idle connection blocks the accept loop. [GH-3859]

FEATURES:

• agent: Added support for gRPC health checks that probe the standard gRPC health endpoint. [GH-3073]

IMPROVEMENTS:

• agent: (Consul Enterprise) The disable_update_check option to disable Checkpoint now defaults to true (this is only in the Enterprise version).
• build: Bumped Go version to 1.9.3. [GH-3837]

BUG FIXES:

• agent: (Consul Enterprise) Fixed an issue where the snapshot agent's HTTP client config was being ignored in favor of the HTTP command-line flags.
• agent: Fixed an issue where health checks added to services with tags would cause extra periodic writes to the Consul servers, even if nothing had changed. This could cause extra churn on downstream applications like consul-template or Fabio. [GH-3845]
• agent: Fixed several areas where reading from catalog, health, or agent HTTP endpoints could make unintended mofidications to Consul's state in a way that would cause unnecessary anti-entropy syncs back to the Consul servers. This could cause extra churn on downstream applications like consul-template or Fabio. [GH-3867]
• agent: Fixed an issue where Serf events for failed Consul servers weren't being proactively processed by the RPC router. This would prvent Consul from proactively choosing a new server, and would instead wait for a failed RPC request before choosing a new server. This exposed clients to a failed request, when often the proactive switching would avoid that. [GH-3864]

SECURITY:

• dns: Updated DNS vendor library to pick up bug fix in the DNS server where an open idle connection blocks the accept loop. [GH-3859]

FEATURES:

• agent: Added support for gRPC health checks that probe the standard gRPC health endpoint. [GH-3073]

IMPROVEMENTS:

• agent: (Consul Enterprise) The disable_update_check option to disable Checkpoint now defaults to true (this is only in the Enterprise version).
• build: Bumped Go version to 1.9.3. [GH-3837]

BUG FIXES:

• agent: (Consul Enterprise) Fixed an issue where the snapshot agent's HTTP client config was being ignored in favor of the HTTP command-line flags.
• agent: Fixed an issue where health checks added to services with tags would cause extra periodic writes to the Consul servers, even if nothing had changed. This could cause extra churn on downstream applications like consul-template or Fabio. [GH-3845]
• agent: Fixed an issue where Serf events for failed Consul servers weren't being proactively processed by the RPC router. This would prvent Consul from proactively choosing a new server, and would instead wait for a failed RPC request before choosing a new server. This exposed clients to a failed request, when often the proactive switching would avoid that. [GH-3864]

SECURITY:

• ui: Patched handlebars JS to escape = to prevent potential XSS issues. [GH-3733]

BREAKING CHANGES:

• agent: Updated Consul's HTTP server to ban all URLs containing non-printable characters (a bad request status will be returned for these cases). This affects some user-facing areas like key/value entry key names which are carried in URLs. [GH-3762]

FEATURES:

• agent: Added retry-join support for Azure Virtual Machine Scale Sets. [GH-3824]

IMPROVEMENTS:

• agent: Added agent-side telemetry around Catalog APIs to provide insight on Consul's operation from the user's perspecive. [GH-3765]
• agent: Added the NodeID field back to the /v1/agent/self endpoint's Config block. [GH-3778]
• api: Added missing CheckID and Name fields to API client's AgentServiceCheck structure so that IDs and names can be set when registering checks with services. [GH-3788]

BUG FIXES:

• agent: Fixed an issue where config file symlinks were not being interpreted correctly. [GH-3753]
• agent: Ignore malformed leftover service/check files and warn about them instead of refusing to start. [GH-1221]
• agent: Enforce a valid port for the Serf WAN since it can't be disabled. [GH-3817]
• agent: Stopped looging messages about zero RTTs when updating network coordinates since they are not harmful to the algorithm. Since we are still trying to find the root cause of these zero measurements, we added new metrics counters so these are still observable. [GH-3789]
• server: Fixed a crash when POST-ing an empty body to the /v1/query endpoint. [GH-3791]
• server: (Consul Enterprise) Fixed an issue where unhealthy servers were not replaced in a redundancy zone by autopilot (servers previously needed to be removed in order for a replacement to occur).
• ui: Added a URI escape around key/value keys so that it's not possible to create unexpected partial key names when entering characters like ? inside a key. [GH-3760]