github.com/hashicorp/consul

Releases

1. ▸▾v0.9.1-0.20170720033514-ce5e8e44241e20 Jul 2017pre-release

   Nothing published for this version

2. ▸▾v0.9.020 Jul 20172 sources agree

   agent: Added a new `enable_script_checks` configuration option that defaults to false, meaning that in order to allow an agent to run health checks th

   BREAKING CHANGES:

   • agent: Added a new enable_script_checks configuration option that defaults to false, meaning that in order to allow an agent to run health checks that execute scripts, this will need to be configured and set to true. This provides a safer out-of-the-box configuration for Consul where operators must opt-in to allow script-based health checks. [GH-3087]
   • api: Reworked context support in the API client to more closely match the Go standard library, and added context support to write requests in addition to read requests. [GH-3273, GH-2992]
   • ui: Since the UI is now bundled with the application we no longer provide a separate UI package for downloading. [GH-3292]

   FEATURES:

   • agent: Added a new block_endpoints configuration option that allows blocking HTTP API endpoints by prefix. This allows operators to completely disallow access to specific endpoints on a given agent. [GH-3252]
   • cli: Added a new consul catalog command for reading datacenters, nodes, and services from the catalog. [GH-3204]
   • server: (Consul Enterprise) Added a new consul operator area update command and corresponding HTTP endpoint to allow for transitioning the TLS setting of network areas at runtime. [GH-3075]
   • server: (Consul Enterprise) Added a new UpgradeVersionTag field to the Autopilot config to allow for using the migration feature to roll out configuration or cluster changes, without having to upgrade Consul itself.

   IMPROVEMENTS:

   • agent: (Consul Enterprise) Snapshot agent rotation uses S3's pagination API, enabling retaining more than a 100 snapshots.
   • agent: Removed registration of the consul service from the agent since it's already handled by the leader. This means that Consul servers no longer need to have an acl_agent_token with write access to the consul service if ACLs are enabled. [GH-3248]
   • agent: Changed /v1/acl/clone response to 403 (from 404) when trying to clone an ACL that doesn't exist. [GH-1113]
   • agent: Changed the consul exec ACL resolution logic to use the acl_agent_token if it's available. This lets operators configure an acl_agent_token with the required write privilieges to the _rexec prefix of the KV store without giving this to the acl_token, which would expose those privileges to users as well. [GH-3160]
   • agent: Updated memberlist to get latest LAN gossip tuning based on the Lifeguard paper published by Hashicorp Research. [GH-3287]
   • api: Added the ability to pass in a context as part of the QueryOptions during a request. This provides a way to cancel outstanding blocking queries. [GH-3195]
   • api: Changed signature for "done" channels on agent.Monitor() and session.RenewPeriodic methods to make them more compatible with context. [GH-3271]
   • docs: Added a complete end-to-end example of ACL bootstrapping in the ACL Guide. [GH-3248]
   • vendor: Updated golang.org/x/sys/unix to support IBM s390 platforms. [GH-3240]
   • agent: rewrote Docker health checks without using the Docker client and its dependencies. [GH-3270]

   BUG FIXES:

   • agent: Fixed an issue where watch plans would take up to 10 minutes to close their connections and give up their file descriptors after reloading Consul. [GH-3018]
   • agent: (Consul Enterprise) Fixed an issue with the snapshot agent where it could get stuck trying to obtain the leader lock after an extended server outage.
   • agent: Fixed HTTP health checks to allow them to set the Host header correctly on outgoing requests. [GH-3203]
   • agent: Serf snapshots can now auto recover from disk write errors without needing a restart. [GH-1744]
   • agent: Fixed log redacting code to properly remove tokens from log lines with ACL tokens in the URL itself: /v1/acl/clone/:uuid, /v1/acl/destroy/:uuid, /v1/acl/info/:uuid. [GH-3276]
   • agent: Fixed an issue in the Docker client where Docker checks would get EOF errors trying to connect to a volume-mounted Docker socket. [GH-3254]
   • agent: Fixed a crash when using Azure auto discovery. [GH-3193]
   • agent: Added node read privileges to the acl_agent_master_token by default so it can see all nodes, which enables it to be used with operations like consul members. [GH-3113]
   • agent: Fixed an issue where enabling -disable-keyring-file would cause gossip encryption to be disabled. [GH-3243]
   • agent: Fixed a race condition where checks that are not associated with any existing services were allowed to persist. [GH-3297]
   • agent: Stop docker checks on service deregistration and on shutdown. [GH-3265, GH-3295]
   • server: Updated the Raft library to pull in a fix where servers that are very far behind in replication can get stuck in a loop trying to install snapshots. [GH-3201]
   • server: Fixed a rare but serious deadlock where the Consul leader routine could get stuck with the Raft internal leader routine while waiting for the initial barrier after a leader election. [GH-3230]
   • server: Added automatic cleanup of failed Raft snapshots. [GH-3258]
   • server: (Consul Enterprise) Fixed an issue where networks areas would not be able to be added when the server restarts if the Raft log contained a specific sequence of adds and deletes for network areas with the same peer datacenter.
   • ui: Provided a path to reset the ACL token when the current token is invalid. Previously, the UI would get stuck on the error page and it wasn't possible to get back to the settings. [GH-2370]
   • ui: Removed an extra fetch of the nodes resource when loading the UI. [GH-3245]
   • ui: Changed default ACL token type to "client" when creating ACLs. [GH-3246]
   • ui: Display a 404 error instead of a 200 when trying to load a nonexistent node. [GH-3251]