Consul - v1.14.8

1.14.8 (June 26, 2023)

SECURITY:

• Update to UBI base image to 9.2. [GH-17513]

FEATURES:

• cli: consul operator raft list-peers command shows the number of commits each follower is trailing the leader by to aid in troubleshooting. [GH-17582]
• server: (Enterprise Only) allow automatic license utilization reporting. [GH-5102]

IMPROVEMENTS:

• connect: update supported envoy versions to 1.21.6, 1.22.11, 1.23.9, 1.24.7 [GH-17547]
• debug: change default setting of consul debug command. now default duration is 5ms and default log level is 'TRACE' [GH-17596]
• fix metric names in /docs/agent/telemetry [GH-17577]
• peering: gRPC queries for TrustBundleList, TrustBundleRead, PeeringList, and PeeringRead now support blocking semantics,
  reducing network and CPU demand.
  The HTTP APIs for Peering List and Read have been updated to support blocking. [GH-17426]
• raft: Remove expensive reflection from raft/mesh hot path [GH-16552]
• systemd: set service type to notify. [GH-16845]

BUG FIXES:

• cache: fix a few minor goroutine leaks in leaf certs and the agent cache [GH-17636]
• connect: reverts #17317 fix that caused a downstream error for Ingress/Mesh/Terminating GWs when their respective config entry does not already exist. [GH-17541]
• namespaces: (Enterprise only) fixes a bug where agent health checks stop syncing for all services on a node if the namespace of any service has been removed from the server.
• namespaces: (Enterprise only) fixes a bug where namespaces are stuck in a deferred deletion state indefinitely under some conditions.
  Also fixes the Consul query metadata present in the HTTP headers of the namespace read and list endpoints.
• namespaces: adjusts the return type from HTTP list API to return the api module representation of a namespace.
  This fixes an error with the consul namespace list command when a namespace has a deferred deletion timestamp.
• peering: Fix a bug that caused server agents to continue cleaning up peering resources even after loss of leadership. [GH-17483]
• peering: Fix issue where modifying the list of exported services did not correctly replicate changes for services that exist in a non-default namespace. [GH-17456]