CHANGELOG: add v3.3 pre-release #8979
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
gyuho
force-pushed
the
changelog-3.3
branch
11 times, most recently
from
a8b0fa9
to
e8d8396
Compare
|
@hexfusion Good catch. It was missing from changelog. Just added. Will be shipped in v3.3. Thanks. |
gyuho
force-pushed
the
changelog-3.3
branch
6 times, most recently
from
eb1bcaa
to
11770e7
Compare
Codecov Report
@@ Coverage Diff @@
## master #8979 +/- ##
==========================================
- Coverage 76.09% 76.03% -0.06%
==========================================
Files 359 359
Lines 29841 29841
==========================================
- Hits 22707 22691 -16
- Misses 5556 5576 +20
+ Partials 1578 1574 -4
Continue to review full report at Codecov.
|
gyuho
force-pushed
the
changelog-3.3
branch
9 times, most recently
from
b462381
to
b5ad03b
Compare
gyuho
force-pushed
the
changelog-3.3
branch
4 times, most recently
from
cf0d4fb
to
0491faf
Compare
gyuho
commented
Dec 8, 2017
| - Document [TLS authentication changes](https://github.com/coreos/etcd/pull/8895): | ||
| - [Server accepts connections if IP matches, without checking DNS entries](https://github.com/coreos/etcd/pull/8223). For instance, if peer cert contains IP addresses and DNS names in Subject Alternative Name (SAN) field, and the remote IP address matches one of those IP addresses, server just accepts connection without further checking the DNS names. | ||
| - [Server supports reverse-lookup on wildcard DNS `SAN`](https://github.com/coreos/etcd/pull/8281). For instance, if peer cert contains only DNS names (no IP addresses) in Subject Alternative Name (SAN) field, server first reverse-lookups the remote IP address to get a list of names mapping to that address (e.g. `nslookup IPADDR`). Then accepts the connection if those names have a matching name with peer cert's DNS names (either by exact or wildcard match). If none is matched, server forward-lookups each DNS entry in peer cert (e.g. look up `example.default.svc` when the entry is `*.example.default.svc`), and accepts connection only when the host's resolved addresses have the matching IP address with the peer's remote IP address. | ||
| - Add [`etcd --peer-require-cn`](https://github.com/coreos/etcd/pull/8616) flag. |
There was a problem hiding this comment.
@mitake, please let me know if I am missing anything. Thanks.
gyuho
force-pushed
the
changelog-3.3
branch
6 times, most recently
from
287e479
to
7bc3f18
Compare
gyuho
force-pushed
the
changelog-3.3
branch
8 times, most recently
from
e9ada1a
to
4809ff2
Compare
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
/cc @xiang90 @jpbetz @fanminshi
Will add
When the release candidate is out, sometime this or next month.