Consul k8s - v1.1.2

1.1.2 (June 5, 2023)

SECURITY:

• Bump Dockerfile base image for RedHat UBI consul-k8s-control-plane image to ubi-minimal:9.2. [GH-2204]
• Bump controller-runtime to address CVEs in dependencies. [GH-2226]
• Upgrade to use Go 1.20.4.
  This resolves vulnerabilities CVE-2023-24537(go/scanner),
  CVE-2023-24538(html/template),
  CVE-2023-24534(net/textproto) and
  CVE-2023-24536(mime/multipart).
  Also, golang.org/x/net has been updated to v0.7.0 to resolve CVEs CVE-2022-41721
  , CVE-2022-27664 and CVE-2022-41723
  [GH-2104]

FEATURES:

• Add support for consul-telemetry-collector to forward envoy metrics to an otelhttp compatible receiver or HCP [GH-2134]
• consul-telemetry-collector: Configure envoy proxy config during registration when consul-telemetry-collector is enabled. [GH-2143]
• sync-catalog: add ability to sync hostname from a Kubernetes Ingress resource to the Consul Catalog during service registration. [GH-2098]

IMPROVEMENTS:

• cli: Add consul-k8s config read command that returns the helm configuration in yaml format. [GH-2078]
• cli: add consul-telemetry-gateway allow-all intention for -demo [GH-2262]
• cli: update cloud preset to enable telemetry collector [GH-2205]
• consul-telemetry-collector: add acceptance tests for consul telemetry collector component [GH-2195]

BUG FIXES:

• crd: fix bug on service intentions CRD causing some updates to be ignored. [GH-2194]
• api-gateway: fix issue where the API Gateway controller is unable to start up successfully when Vault is configured as the secrets backend [GH-2083]
• control-plane: add support for idleTimeout in the Service Router config [GH-2156]
• control-plane: fix issue with json tags of service defaults fields EnforcingConsecutive5xx, MaxEjectionPercent and BaseEjectionTime. [GH-2160]
• control-plane: fix issue with multiport pods crashlooping due to dataplane port conflicts by ensuring dns redirection is disabled for non-tproxy pods [GH-2176]
• helm: add missing $HOST_IP environment variable to to mesh gateway deployments. [GH-1808]
• sync-catalog: fix issue where the sync-catalog ACL token were set with an incorrect ENV VAR. [GH-2068]