[NET-7948] Bump Envoy version to address multiple CVEs #20589
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
github-actions
bot
added
type/docs
david-yu
approved these changes
Feb 12, 2024
zalimeni
force-pushed
the
zalimeni/net-7948-update-envoy-version
branch
from
31aa784 to
7217763
Compare
4 tasks
zalimeni
force-pushed
the
zalimeni/net-7948-update-envoy-version
branch
from
7217763 to
a40a24b
Compare
|
Added missing bumps for 1.15 nightlies |
zalimeni
force-pushed
the
zalimeni/net-7948-update-envoy-version
branch
2 times, most recently
from
2b5533e to
476d20d
Compare
zalimeni
commented
Feb 12, 2024
Comment on lines
42
to
54
| | 1.18.x | 1.28.0, 1.27.2, 1.26.6, 1.25.11 | | ||
| | 1.17.x | 1.27.2, 1.26.6, 1.25.11, 1.24.12 | | ||
| | 1.16.x | 1.26.6, 1.25.11, 1.24.12, 1.23.12 | | ||
| | 1.18.x | 1.28.1, 1.27.3, 1.26.7, 1.25.11 | | ||
| | 1.17.x | 1.27.3, 1.26.7, 1.25.11, 1.24.12 | | ||
| | 1.16.x | 1.26.7, 1.25.11, 1.24.12, 1.23.12 | | ||
| | 1.15.x | 1.28.1, 1.27.3, 1.26.7, 1.25.11, 1.26.7, 1.25.11, 1.24.12, 1.23.12 | | ||
|
|
||
| ### Envoy and Consul Dataplane | ||
|
|
||
| The Consul dataplane component was introduced in Consul v1.14 as a way to manage Envoy proxies without the use of Consul clients. Each new minor version of Consul is released with a new minor version of Consul dataplane, which packages both Envoy and the `consul-dataplane` binary in a single container image. For backwards compatibility reasons, each new minor version of Consul will also support the previous minor version of Consul dataplane to allow for seamless upgrades. In addition, each minor version of Consul will support the next minor version of Consul dataplane to allow for extended dataplane support via newer versions of Envoy. | ||
|
|
||
| | Consul Version | Default `consul-dataplane` Version | Other compatible `consul-dataplane` Versions | | ||
| | ------------------- | ------------------------------------------------------------|----------------------------------------------| | ||
| | 1.17.x | 1.3.x (Envoy 1.27.x) | 1.2.x (Envoy 1.26.x) | | ||
| | 1.18.x | 1.4.x (Envoy 1.28.x) | 1.3.x (Envoy 1.27.x) | | ||
| | 1.17.x | 1.3.x (Envoy 1.27.x) | 1.4.x (Envoy 1.28.x), 1.2.x (Envoy 1.26.x) | |
There was a problem hiding this comment.
@david-yu could I get another look at this change to 👍🏻 the docs here? I noticed they were a bit inconsistent.
I know we sometimes have updated these closer to the actual .0 release, but given we already had an entry for 1.18.x in one table, probably ok to just keep between now and the release (given we're also already publishing dev images, and past RC1)
There was a problem hiding this comment.
This looks good to add these in here. I'm curious about the number of Envoy versions that 1.15.x supports. Will take offline.
There was a problem hiding this comment.
Cool, thanks - for better visibility for others, this is essentially a follow-up to #20323
david-yu
reviewed
Feb 12, 2024
zalimeni
force-pushed
the
zalimeni/net-7948-update-envoy-version
branch
from
476d20d to
f670f7a
Compare
Merged
4 tasks
4 tasks
4 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Bump Envoy version
mainand backport torelease/1.18.xto address multiple CVEs.Note: Versions of Envoy < 1.26.x are not maintained and do not provide patched versions that address these CVEs.
Release branch PRs:
Testing & Reproduction steps
CI continues to pass.
PR Checklist