-
Notifications
You must be signed in to change notification settings - Fork 10
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Post-release updates for v1.6.0 #649
Conversation
nathancoleman
commented
Oct 15, 2024
- Port over CHANGELOG update
- Consume latest release of consul/proto-public
Fix typo in changelog header
* Upgrade envoy version to 1.31.2 to address [CVE-2024-45807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45807),[CVE-2024-45808](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45808),[CVE-2024-45806](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45806),[CVE-2024-45809](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45809) and [CVE-2024-45810](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45810) [[GH-624](https://github.com/hashicorp/consul-dataplane/pull/624)] | ||
* Upgrade to support Envoy `1.31.0`. [[GH-609](https://github.com/hashicorp/consul-dataplane/pull/609)] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
* Upgrade envoy version to 1.31.2 to address [CVE-2024-45807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45807),[CVE-2024-45808](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45808),[CVE-2024-45806](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45806),[CVE-2024-45809](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45809) and [CVE-2024-45810](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45810) [[GH-624](https://github.com/hashicorp/consul-dataplane/pull/624)] | |
* Upgrade to support Envoy `1.31.0`. [[GH-609](https://github.com/hashicorp/consul-dataplane/pull/609)] | |
* Upgrade Envoy version to 1.31.2 to address [CVE-2024-45807](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45807),[CVE-2024-45808](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45808),[CVE-2024-45806](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45806),[CVE-2024-45809](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45809) and [CVE-2024-45810](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45810) [[GH-624](https://github.com/hashicorp/consul-dataplane/pull/624)] | |
* Upgrade to support Envoy 1.31.0. [[GH-609](https://github.com/hashicorp/consul-dataplane/pull/609)] |
~~ Minor, but makes both entries consistent. Could also combine them into one 🤷🏻♂️ but either approach seems valid.
- DNS Server, xDS Server, and Envoy are enabled. | ||
- The system validates that `-consul-dns-bind-addr` and equivalent environment variable must be set to the loopback address. | ||
When set to `dns-proxy`: | ||
- Only DNS Server is enabled. xDS Server and Envoy are disabled. | ||
- `consul-dns-bind-addr` and equivalent environment variable can be set to other values besides the loopback address. [[GH-571](https://github.com/hashicorp/consul-dataplane/pull/571)] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- DNS Server, xDS Server, and Envoy are enabled. | |
- The system validates that `-consul-dns-bind-addr` and equivalent environment variable must be set to the loopback address. | |
When set to `dns-proxy`: | |
- Only DNS Server is enabled. xDS Server and Envoy are disabled. | |
- `consul-dns-bind-addr` and equivalent environment variable can be set to other values besides the loopback address. [[GH-571](https://github.com/hashicorp/consul-dataplane/pull/571)] | |
- DNS Server, xDS Server, and Envoy are enabled. | |
- The system validates that `-consul-dns-bind-addr` and equivalent environment variable must be set to the loopback address. | |
When set to `dns-proxy`: | |
- Only DNS Server is enabled. xDS Server and Envoy are disabled. | |
- `consul-dns-bind-addr` and equivalent environment variable can be set to other values besides the loopback address. [[GH-571](https://github.com/hashicorp/consul-dataplane/pull/571)] |
I think this indentation needs fixing for sub-bullets
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Two small suggestions for changelog, otherwise LGTM!
@nathancoleman oops, I didn't notice auto-merge was on. See prior comments for potential changelog fixes (I can open a PR if you're tied up) |
* Consume latest release of consul/proto-public * Update CHANGELOG.md Fix typo in changelog header