diff --git a/.changelog/14132.txt b/.changelog/14132.txt deleted file mode 100644 index 7037f479d9237..0000000000000 --- a/.changelog/14132.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:enhancement -raft: add an operator api endpoint and a command to initiate raft leadership transfer. -``` diff --git a/.changelog/14244.txt b/.changelog/14244.txt deleted file mode 100644 index 3edc4e7f56b2f..0000000000000 --- a/.changelog/14244.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -client: add support for RemoveEmptyTags in Prepared Queries templates. -``` diff --git a/.changelog/14437.txt b/.changelog/14437.txt deleted file mode 100644 index c9584f641a3d3..0000000000000 --- a/.changelog/14437.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -acl: Added option to allow for an operator-generated bootstrap token to be passed to the `acl bootstrap` command. -``` \ No newline at end of file diff --git a/.changelog/14465.txt b/.changelog/14465.txt deleted file mode 100644 index 8fbdf14e6a064..0000000000000 --- a/.changelog/14465.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -dns: support RFC 2782 SRV lookups for prepared queries using format `_._tcp.query[.].`. -``` diff --git a/.changelog/14832.txt b/.changelog/14832.txt deleted file mode 100644 index 6fef1c257427b..0000000000000 --- a/.changelog/14832.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -agent: Give better error when client specifies wrong datacenter when auto-encrypt is enabled. -``` diff --git a/.changelog/14833.txt b/.changelog/14833.txt deleted file mode 100644 index fd8f911e27cd1..0000000000000 --- a/.changelog/14833.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -cli: always use name "global" for proxy-defaults config entries -``` diff --git a/.changelog/14956.txt b/.changelog/14956.txt deleted file mode 100644 index fac4bc12ea006..0000000000000 --- a/.changelog/14956.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:bug -cache: refactor agent cache fetching to prevent unnecessary fetches on error -``` diff --git a/.changelog/15001.txt b/.changelog/15001.txt deleted file mode 100644 index 18d658547eb79..0000000000000 --- a/.changelog/15001.txt +++ /dev/null @@ -1,4 +0,0 @@ -```release-note:improvement -ingress-gateways: Don't log error when gateway is registered without a config entry -``` - diff --git a/.changelog/15107.txt b/.changelog/15107.txt deleted file mode 100644 index 33e36008233dd..0000000000000 --- a/.changelog/15107.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:bug -cli: fatal error if config file does not have HCL or JSON extension, instead of warn and skip -``` \ No newline at end of file diff --git a/.changelog/15253.txt b/.changelog/15253.txt index 81fe48c24ed68..b0063ffb47999 100644 --- a/.changelog/15253.txt +++ b/.changelog/15253.txt @@ -1,3 +1,3 @@ ```release-note:bug -connect: Fixed issue where using Vault 1.11+ as CA provider would eventually break Intermediate CAs in primary datacenters. A separate fix is needed to address the same issue in secondary datacenters. [[GH-15217](https://github.com/hashicorp/consul/issues/15217)] +connect: Fixed issue where using Vault 1.11+ as CA provider would eventually break Intermediate CAs [[GH-15217](https://github.com/hashicorp/consul/issues/15217)] ``` \ No newline at end of file diff --git a/.changelog/15274.txt b/.changelog/15274.txt deleted file mode 100644 index 689f65774930c..0000000000000 --- a/.changelog/15274.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note: bug -cli: fix ACL token processing unexpected precedence -``` \ No newline at end of file diff --git a/.changelog/15297.txt b/.changelog/15297.txt deleted file mode 100644 index 66fa6450dad45..0000000000000 --- a/.changelog/15297.txt +++ /dev/null @@ -1,7 +0,0 @@ -```release-note:improvement -api: updated the go module directive to 1.18. -``` - -```release-note:improvement -sdk: updated the go module directive to 1.18. -``` diff --git a/.changelog/15598.txt b/.changelog/15598.txt deleted file mode 100644 index 87a0854059749..0000000000000 --- a/.changelog/15598.txt +++ /dev/null @@ -1,4 +0,0 @@ -```release-note:breaking-change -config: Deprecate `-join`, `-join-wan`, `start_join`, and `start_join_wan`. -These options are now aliases of `-retry-join`, `-retry-join-wan`, `retry_join`, and `retry_join_wan`, respectively. -``` diff --git a/.changelog/15614.txt b/.changelog/15614.txt deleted file mode 100644 index 1b43a27e9bf9e..0000000000000 --- a/.changelog/15614.txt +++ /dev/null @@ -1,7 +0,0 @@ -```release-note:feature -config-entry(ingress-gateway): support outlier detection (passive health check) for upstream cluster -``` - -```release-note:breaking-change -ingress-gateway: upstream cluster will have empty outlier_detection if passive health check is unspecified -``` diff --git a/.changelog/15654.txt b/.changelog/15654.txt deleted file mode 100644 index 169191377ba3b..0000000000000 --- a/.changelog/15654.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:feature -cli: Adds new command - `consul services export` - for exporting a service to a peer or partition -``` diff --git a/.changelog/15710.txt b/.changelog/15710.txt deleted file mode 100644 index fbc335258d81b..0000000000000 --- a/.changelog/15710.txt +++ /dev/null @@ -1,4 +0,0 @@ -```release-note:breaking-change -xds: Remove the `connect.enable_serverless_plugin` agent configuration option. Now -Lambda integration is enabled by default. -``` diff --git a/.changelog/15794.txt b/.changelog/15794.txt deleted file mode 100644 index 8195ccce6dc48..0000000000000 --- a/.changelog/15794.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -cli: connect envoy command errors if grpc ports are not open -``` \ No newline at end of file diff --git a/.changelog/15817.txt b/.changelog/15817.txt deleted file mode 100644 index b31b9503134d0..0000000000000 --- a/.changelog/15817.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:breaking-change -extensions: Refactor Lambda integration to get configured with the Envoy extensions field on service-defaults configuration entries. -``` diff --git a/.changelog/15818.txt b/.changelog/15818.txt deleted file mode 100644 index 7a7182a2d4cfa..0000000000000 --- a/.changelog/15818.txt +++ /dev/null @@ -1,6 +0,0 @@ -```release-note:enhancement -connect: for early awareness of Envoy incompatibilities, when using the `consul connect envoy` command the Envoy version will now be checked for compatibility. If incompatible Consul will error and exit. -``` -```release-note:breaking-change -connect: Consul will now error and exit when using the `consul connect envoy` command if the Envoy version is incompatible. To ignore this check use flag `--ignore-envoy-compatibility` -``` \ No newline at end of file diff --git a/.changelog/15828.txt b/.changelog/15828.txt deleted file mode 100644 index 8b8cfdce76524..0000000000000 --- a/.changelog/15828.txt +++ /dev/null @@ -1,4 +0,0 @@ -```release-note:feature -acl: Add new `acl.tokens.config_file_registration` config field which specifies the token used -to register services and checks that are defined in config files. -``` diff --git a/.changelog/15864.txt b/.changelog/15864.txt deleted file mode 100644 index 66030f7f5e18f..0000000000000 --- a/.changelog/15864.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:feature -connect: adds support for Envoy [access logging](https://developer.hashicorp.com/consul/docs/connect/observability/access-logs). Access logging can be enabled using the [`proxy-defaults`](https://developer.hashicorp.com/consul/docs/connect/config-entries/proxy-defaults#accesslogs) config entry. -``` diff --git a/.changelog/15884.txt b/.changelog/15884.txt deleted file mode 100644 index aaa4f35c99a68..0000000000000 --- a/.changelog/15884.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:feature -acl: anonymous token is logged as 'anonymous token' instead of its accessor ID -``` \ No newline at end of file diff --git a/.changelog/15892.txt b/.changelog/15892.txt deleted file mode 100644 index 972261120b57e..0000000000000 --- a/.changelog/15892.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:enhancement -grpc: client agents will switch server on error, and automatically retry on `RESOURCE_EXHAUSTED` responses -``` diff --git a/.changelog/15906.txt b/.changelog/15906.txt deleted file mode 100644 index b1a4ba4761be7..0000000000000 --- a/.changelog/15906.txt +++ /dev/null @@ -1,7 +0,0 @@ -```release-note:feature -xds: Add a built-in Envoy extension that inserts Lua HTTP filters. -``` - -```release-note:feature -xds: Insert originator service identity into Envoy's dynamic metadata under the `consul` namespace. -``` diff --git a/.changelog/15922.txt b/.changelog/15922.txt deleted file mode 100644 index 96cd488012d6d..0000000000000 --- a/.changelog/15922.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:breaking-change -acl: remove all functionality and references for legacy acl policies. -``` \ No newline at end of file diff --git a/.changelog/15947.txt b/.changelog/15947.txt deleted file mode 100644 index faec894c3da33..0000000000000 --- a/.changelog/15947.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:breaking-change -acl: remove all acl migration functionality and references to the legacy acl system. -``` \ No newline at end of file diff --git a/.changelog/15956.txt b/.changelog/15956.txt deleted file mode 100644 index 24537d6a9040b..0000000000000 --- a/.changelog/15956.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:breaking-change -connect: Add `peer` field to service-defaults upstream overrides. The addition of this field makes it possible to apply upstream overrides only to peer services. Prior to this change, overrides would be applied based on matching the `namespace` and `name` fields only, which means users could not have different configuration for local versus peer services. With this change, peer upstreams are only affected if the `peer` field matches the destination peer name. -``` diff --git a/.changelog/15967.txt b/.changelog/15967.txt deleted file mode 100644 index 77a95ebcd2a77..0000000000000 --- a/.changelog/15967.txt +++ /dev/null @@ -1,9 +0,0 @@ -```release-note:improvement -connect: Warn if ACLs are enabled but a token is not provided to envoy -``` - -```release-note:improvement -telemetry: Added a `consul.xds.server.streamsUnauthenticated` metric to track -the number of active xDS streams handled by the server that are unauthenticated -because ACLs are not enabled or ACL tokens were missing. -```` \ No newline at end of file diff --git a/.changelog/15970.txt b/.changelog/15970.txt deleted file mode 100644 index 59ea54f51f532..0000000000000 --- a/.changelog/15970.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -ca: support Vault agent auto-auth config for Vault CA provider using AWS/GCP authentication. -``` diff --git a/.changelog/15987.txt b/.changelog/15987.txt deleted file mode 100644 index 2a4da0320a36d..0000000000000 --- a/.changelog/15987.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -api: Enable setting query options on agent force-leave endpoint. -``` \ No newline at end of file diff --git a/.changelog/16009.txt b/.changelog/16009.txt deleted file mode 100644 index 5116bcc22993c..0000000000000 --- a/.changelog/16009.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:deprecation -acl: Deprecate the `token` query parameter and warn when it is used for authentication. -``` diff --git a/.changelog/16044.txt b/.changelog/16044.txt deleted file mode 100644 index 338c5c309f804..0000000000000 --- a/.changelog/16044.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:deprecation -cli: The `-id` flag on acl token operations has been changed to `-accessor-id` for clarity in documentation. The `-id` flag will continue to work, but operators should use `-accessor-id` in the future. -``` \ No newline at end of file diff --git a/.changelog/16097.txt b/.changelog/16097.txt deleted file mode 100644 index e25bf8961a8e4..0000000000000 --- a/.changelog/16097.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:bug-fix -agent: Only use the `agent` token for internal deregistration of checks and services during anti-entropy syncing. The service token specified in the `token` field of the check or service definition is no longer used for deregistration. This fixes an issue where the agent failed to ever deregister a service or check if the service token was deleted. -``` diff --git a/.changelog/16105.txt b/.changelog/16105.txt deleted file mode 100644 index ac3ae0e929d38..0000000000000 --- a/.changelog/16105.txt +++ /dev/null @@ -1,11 +0,0 @@ -```release-note:breaking-change -acl errors: Delete and get requests now return descriptive errors when the specified resource cannot be found. Other ACL request errors provide more information about when a resource is missing. Add error for when the ACL system has not been bootstrapped. -1. Delete Token/Policy/AuthMethod/Role/BindingRule endpoints now return 404 when the resource cannot be found. - - New error formats: "Requested * does not exist: ACL not found", "* not found in namespace $NAMESPACE: ACL not found" -3. Read Token/Policy/Role endpoints now return 404 when the resource cannot be found. - - New error format: "Cannot find * to delete" -4. Logout now returns a 401 error when the supplied token cannot be found - - New error format: "Supplied token does not exist" -5. Token Self endpoint now returns 404 when the token cannot be found. - - New error format: "Supplied token does not exist" -``` \ No newline at end of file diff --git a/.changelog/16176.txt b/.changelog/16176.txt deleted file mode 100644 index d68e053f599c4..0000000000000 --- a/.changelog/16176.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -raft: Added experimental `wal` backend for log storage. -``` \ No newline at end of file diff --git a/.changelog/16204.txt b/.changelog/16204.txt deleted file mode 100644 index 89ae9815edcad..0000000000000 --- a/.changelog/16204.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -ui: Update sidebar width to 280px -``` diff --git a/.changelog/16205.txt b/.changelog/16205.txt deleted file mode 100644 index 5d8bd47987695..0000000000000 --- a/.changelog/16205.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:feature -command: Adds the `operator usage instances` subcommand for displaying total services, connect service instances and billable service instances in the local datacenter or globally. -``` diff --git a/.changelog/16224.txt b/.changelog/16224.txt deleted file mode 100644 index 76f73d05953c3..0000000000000 --- a/.changelog/16224.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -ca: support Vault agent auto-auth config for Vault CA provider using AliCloud authentication. -``` diff --git a/.changelog/16227.txt b/.changelog/16227.txt deleted file mode 100644 index 698c7bd2fc792..0000000000000 --- a/.changelog/16227.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -ui: update Ember version to 3.27; -``` \ No newline at end of file diff --git a/.changelog/16251.txt b/.changelog/16251.txt deleted file mode 100644 index 7aaf58011e0ac..0000000000000 --- a/.changelog/16251.txt +++ /dev/null @@ -1,3 +0,0 @@ -```release-note:improvement -ui: update from