From 04f5a46e1330495052cb9ba3f5fa1e56fdc3691c Mon Sep 17 00:00:00 2001 From: Luke Kysow <1034429+lkysow@users.noreply.github.com> Date: Thu, 9 Jul 2020 13:38:32 -0700 Subject: [PATCH 1/2] Update changelog --- CHANGELOG.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 277ff4ef6e..903fce80f0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,18 @@ BREAKING CHANGES: * ACLs: Always update Kubernetes auth method created by the `server-acl-init` job. Previously, we would only update the auth method if Consul namespaces are enabled. With this change, we always update it to make sure that any configuration changes or updates to the `connect-injector-authmethod-svc-account` are propagated [[GH-282](https://github.com/hashicorp/consul-k8s/pull/282)]. +* Connect: Connect pods have had the following resource settings changed: `consul-connect-inject-init` now has its memory limit set to `150M` up from `25M` and `consul-connect-lifecycle-sidecar` has its CPU request and limit set to `20m` up from `10m`. [[GH-291](https://github.com/hashicorp/consul-k8s/pull/291)] + +IMPROVEMENTS: + +* Extracted Consul's HTTP flags into our own package so we no longer depend on the internal Consul golang module. [[GH-259](https://github.com/hashicorp/consul-k8s/pull/259)] + +BUG FIXES: + +* Connect: Update resource settings to fix out of memory errors and CPU usage at 100% of limit. [Fixes [GH-283](https://github.com/hashicorp/consul-k8s/issues/283), [consul-helm GH-515](https://github.com/hashicorp/consul-helm/issues/515)] +* Connect: Creating a pod with a different service account name than its Consul service name will now result in an error when ACLs are enabled. + Previously this would not result in an error, but the pod would not be able to send or receive traffic because its ACL token would be for a + different service name. [Fixes [GH-237](https://github.com/hashicorp/consul-k8s/issues/237)] ## 0.16.0 (June 17, 2020) From 717013617947a943e02a75f3a8064a7c3ccc4270 Mon Sep 17 00:00:00 2001 From: Luke Kysow <1034429+lkysow@users.noreply.github.com> Date: Thu, 9 Jul 2020 14:22:26 -0700 Subject: [PATCH 2/2] Code review feedback --- CHANGELOG.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 903fce80f0..6265d8f2ca 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,10 +11,10 @@ IMPROVEMENTS: BUG FIXES: -* Connect: Update resource settings to fix out of memory errors and CPU usage at 100% of limit. [Fixes [GH-283](https://github.com/hashicorp/consul-k8s/issues/283), [consul-helm GH-515](https://github.com/hashicorp/consul-helm/issues/515)] +* Connect: Update resource settings to fix out of memory errors and CPU usage at 100% of limit. [[GH-283](https://github.com/hashicorp/consul-k8s/issues/283), [consul-helm GH-515](https://github.com/hashicorp/consul-helm/issues/515)] * Connect: Creating a pod with a different service account name than its Consul service name will now result in an error when ACLs are enabled. Previously this would not result in an error, but the pod would not be able to send or receive traffic because its ACL token would be for a - different service name. [Fixes [GH-237](https://github.com/hashicorp/consul-k8s/issues/237)] + different service name. [[GH-237](https://github.com/hashicorp/consul-k8s/issues/237)] ## 0.16.0 (June 17, 2020)