Skip to content

v1.5.3
Compare
Choose a tag to compare
@hc-github-team-es-release-engineering hc-github-team-es-release-engineering released this 03 Sep 17:01
v1.5.3
2cb0769
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

1.5.3 (August 30, 2024)

SECURITY:

IMPROVEMENTS:

  • docker: update go-discover binary [GH-4287]
  • docker: update ubi base image to ubi9-minimal:9.4. [GH-4287]
  • helm: Adds webhookCertManager.resources field which can be configured to override the resource settings for the webhook-cert-manager deployment. [GH-4184]
  • helm: Adds connectInject.apiGateway.managedGatewayClass.resourceJob.resources field which can be configured to override the resource settings for the gateway-resources-job job. [GH-4184]
  • config-entry: add validate_clusters to mesh config entry [GH-4256]
  • helm: Kubernetes v1.30 is now supported. Minimum tested version of Kubernetes is now v1.27. [GH-4244]

BUG FIXES:

  • Fixes install of Consul on GKE Autopilot where the option 'manageNonStandardCRDs' was not being used for the TCPRoute CRD. [GH-4213]
  • api-gateway: fix nil pointer deref bug when the section name in a gateway policy is not specified [GH-4247]
  • helm: adds imagePullSecret to the gateway-resources job and the gateway-cleanup job, would fail before if the image was in a private registry [GH-4210]
  • openshift: order SecurityContextConstraint volumes alphabetically to match OpenShift behavior.
    This ensures that diff detection tools like ArgoCD consider the source and reconciled resources to be identical. [GH-4227]
  • sync-catalog: fix infinite retry loop when the catalog fails to connect to consul-server during the sync process [GH-4266]
  • terminating-gateways: Fix bug where namespace field was not correctly set on ACL policies if using the Registration CRD with the service's namespace unset. [GH-4224]
Assets 2
Loading