Bug Fixes:
-
Sync: Add Kubernetes namespace as a suffix to the service names via
-add-k8s-namespace-suffix
flag. This prevents service name collisions in Consul when there are two services with the same name in different namespaces in Kubernetes [GH-139] -
Connect: Only write a
service-defaults
config during Connect injection if the protocol is set explicitly [GH-169]
Bug Fixes:
-
Sync: Now changing the annotation
consul.hashicorp.com/service-sync
tofalse
or deleting the annotation will un-sync the service. [GH-76] -
Sync: Rewrite Consul services to lowercase so they're valid Kubernetes services. [GH-110]
Bug Fixes:
-
Add new delete-completed-job command that is used to delete the server-acl-init Kubernetes Job once it's completed. [GH-152]
-
Fixes a bug where even if the ACL Tokens for the other components existed (e.g. client or sync-catalog) we'd try to generate new tokens and update the secrets. [GH-152]
Improvements:
- Allow users to set annotations on their Kubernetes services that get synced into
Consul meta when using the Connect Inject functionality.
To use, set one or more
consul.hashicorp.com/service-meta-<key>: <value>
annotations which will result in Consul meta<key>: <value>
[GH-141]
Bug Fixes:
-
Fix bug during connect-inject where the
-default-protocol
flag was being ignored [GH-141] -
Fix bug during connect-inject where service-tag annotations were being ignored [GH-141]
-
Fix bug during
server-acl-init
where if any step errored then the command would exit and subsequent commands would fail. Now this command runs until completion, i.e. it retries failed steps indefinitely and is idempotent [GH-138]
Deprecations:
- The
consul.hashicorp.com/connect-service-tags
annotation is deprecated. Useconsul.hashicorp.com/service-tags
instead.
Improvements:
- Allow users to set tags on their Kubernetes services that get synced into
Consul service tags via the
consul.hashicorp.com/connect-service-tags
annotation [GH-115]
Bug fixes:
- Fix bootstrap acl issue when Consul was installed into a namespace other than
default
[GH-106] - Fix sync bug where
ClusterIP
services had theirService
port instead of theirEndpoint
port registered. If theService
'stargetPort
was different thenport
then the wrong port would be registered [GH-132]
Improvements:
- Allow creation of ACL token for Snapshot Agents
- Allow creation of ACL token for Mesh Gateways
- Allows client ACL token creation to be optional
Bug fixes:
- Fix central configuration write command to handle the case where the service already exists
Improvements:
- Use the endpoint IP address when generating a service id for NodePort services to prevent possible overlap of what are supposed to be unique ids
- Support adding a prefix for Kubernetes -> Consul service sync [GH 140]
- Support automatic bootstrapping of ACLs in a Consul cluster that is run fully in Kubernetes.
- Support automatic registration of a Kubernetes AuthMethod for use with Connect (available in Consul 1.5+).
- Support central configuration for services, including proxy defaults (available in Consul 1.5+).
Bug fixes:
- Exclude Kubernetes system namespaces from Connect injection
Improvements:
- Use service's namespace when registering endpoints
- Update the Coalesce method to pass go vet tests
- Register Connect services along with the proxy. This allows the services to appear in the intention dropdown in the UI.[GH 77]
- Add
-log-level
CLI flag for catalog sync
Improvements:
- Add support for prepared queries in the Connect upstream annotation
- Add a health endpoint to the catalog sync process that can be used for Kubernetes health and readiness checks
Improvements:
- Clarify the format of the
consul-write-interval
flag forconsul-k8s
[GH 61] - Add datacenter support to inject annotation
- Update connect injector logging to remove healthcheck log spam and make important messages more visible
Bug fixes:
- Fix service registration naming when using Connect [GH 36]
- Fix catalog sync so that agents don't incorrectly deregister Kubernetes services [GH 40][GH 59]
- Fix performance issue for the k8s -> Consul catalog sync [GH 60]
Improvements:
- Supports a configurable tag for the k8s -> Consul sync [GH 42]
Bug fixes:
- Register NodePort services with the node's ip address [GH 8]
- Add the metadata/annotations field if needed before patching annotations [GH 20]
Improvements:
- Support syncing ClusterIP services [GH 4]
Bug fixes:
- Allow unnamed container ports to be used in connect-inject default annotations.
Bug fixes:
- Fix single direction catalog sync [GH 7]
Features:
- New subcommand:
inject-connect
runs a mutating admission webhook for automatic Connect sidecar injection in Kubernetes. While this can be setup manually, we recommend using the Consul helm chart.
- Initial release