v1.0.7
1.0.7 (May 17, 2023)
SECURITY:
- Upgrade to use Go 1.19.9.
This resolves vulnerabilities CVE-2023-24537(go/scanner
),
CVE-2023-24538(html/template
),
CVE-2023-24534(net/textproto
) and
CVE-2023-24536(mime/multipart
).
Also,golang.org/x/net
has been updated to v0.7.0 to resolve CVEs CVE-2022-41721, CVE-2022-27664 and CVE-2022-41723 [GH-2108]
FEATURES:
- sync-catalog: add ability to sync hostname from a Kubernetes Ingress resource to the Consul Catalog during service registration. [GH-2098]
IMPROVEMENTS:
- cli: Add
consul-k8s config read
command that returns the helm configuration in yaml format. [GH-2078] - helm: update
imageConsulDataplane
value tohashicorp/consul-dataplane:1.0.2
,image
value tohashicorp/consul:1.14.7
,
andimageEnvoy
toenvoyproxy/envoy:v1.24.7
. [GH-2140]
BUG FIXES:
- api-gateway: fix issue where the API Gateway controller is unable to start up successfully when Vault is configured as the secrets backend [GH-2083]
- helm: add missing
$HOST_IP
environment variable to to mesh gateway deployments. [GH-1808] - sync-catalog: fix issue where the sync-catalog ACL token were set with an incorrect ENV VAR. [GH-2068]