BUG FIXES:
- Fix enterprise license application when ACLs are turned off
IMPROVEMENTS:
- Update default consul-k8s version to 0.8.1 for a central config bug fix
IMPROVEMENTS:
- Support adding a prefix to Kubernetes services registered in Consul [GH 140]
- Support an option for automatically bootstrapping ACLs in a Consul cluster that is run fully in Kubernetes. If connectInject is enabled with this option on, this also automatically configures a new Kubernetes AuthMethod so that injected services are automatically granted ACL tokens based on their Kubernetes service account.
- Support central service configuration including proxy defaults in Connect (available in Consul 1.5+).
- Remove the
gossipEncryption.enabled
option and instead have the implementation based on the existence of the secretName and secretKey.
IMPROVEMENTS:
- Support pod PriorityClasses for Consul servers and clients
- Add annotation and additional spec values for the UI service
- Add liveness and readiness checks to the catalog sync pod [consul-k8s GH 57]
- Support custom annotations for Consul clients and servers
- Support PodSecurityPolicies for Consul components
- Add service accounts and cluster roles/role bindings for each Consul component
- Add the namespace to the metadata volume name
- Support tolerations on Consul client and server pods
- Support gossip protocol encryption
- Allows custom environment variables for Consul client and server pods
- Support nodeSelectors for all components
BUG FIXES:
- Allow setting
extraConfig
variables using Helm's--set
flag [GH 74] - Fix a formatting bug in the enterprise license command
IMPROVEMENTS:
- Supports applying a Consul Enterprise License to the cluster through the Helm chart
- Support assigning an ACL token to the catalog sync process [GH 26]
- Updates default
consul
version to1.4.2
andconsul-k8s
version to0.5.0
BUG FIXES:
- Switch the chart labels to a non-changing value to allow helm upgrades [GH 86]
IMPROVEMENTS:
- Supports new NodePort syncing style that uses the node ip address
- Adds a configurable tab to the Kubernetes -> Consul sync
IMPROVEMENTS:
- RBAC support for
syncCatalog
. This will create theClusterRole
,ClusterRoleBinding
andServiceAccount
that is necessary for the catalog sync. [GH-20] - client: agents now have the node name set to the actual K8S node name [GH-14]
- RBAC support for
connectInject
. This will create aClusterRole
,ClusterRoleBinding
, andServiceAccount
that is necessary for the connect injector to automatically generate TLS certificates to interact with the Kubernetes API. - Server affinity is now configurable. This makes it easier to run an entire Consul cluster on Minikube. [GH-13]
- Liveness probes are now http calls, reducing errors in the logs.
- All namespaced resources now specify the namespace metadata, making
helm template
usage in a non-default namespace easier. [GH-66] - Add support for ClusterIP service syncing.
BUG FIXES:
- Add catalog sync default behavior flag to the chart [GH-28]
- Updated images to point to latest versions for 0.3.0.
- Add missing continuation characters to long commands [GH-26].
- connectInject: set the correct namespace for the MutatingWebhookConfiguration so that deployments work in non-default namespaces. [GH-38]
- Provide a valid
maxUnavailable
value when replicas=1. [GH-58] - Correctly sets server resource requirements.
- Update the
maxUnavailable
default calculation to allow rolling updates on 3 server clusters. [GH-71]
FEATURES:
connectInject
can install the automatic Connect sidecar injector.
FEATURES:
syncCatalog
can install the service catalog sync functionality.
IMPROVEMENTS:
- server: support
storageClass
[GH-7]
Initial release