v1.17.3
1.17.3 (February 13, 2024)
SECURITY:
- mesh: Update Envoy versions to 1.27.3 and 1.26.7 to address CVE-2024-23324, CVE-2024-23325, CVE-2024-23322, CVE-2024-23323, CVE-2024-23327, and CVE-2023-44487 [GH-20587]
FEATURES:
- cli: Adds new command
exported-servicesto list all services exported and their consumers. Refer to the CLI docs for more information. [GH-20331]
IMPROVEMENTS:
- ProxyCfg: avoid setting a watch on
Internal.ServiceDumpwhen mesh gateway is not used. [GH-20168] - ProxyCfg: only return the nodes list when querying the
Internal.ServiceDumpwatch from proxycfg [GH-20168] - Upgrade to use Go 1.21.7. [GH-20545]
- api: add a new api(/v1/exported-services) to list all the exported service and their consumers. [GH-20015]
- connect: Add
CaseInsensitiveflag to service-routers that allows paths and path prefixes to ignore URL upper and lower casing. [GH-19647]
BUG FIXES:
- audit-logs: (Enterprise Only) Fixes non ASCII characters in audit logs because of gzip. [GH-20345]
- connect: Fix issue where re-persisting existing proxy-defaults using
httpprotocol fails with a protocol-mismatch error. [GH-20481] - connect: Fix regression with SAN matching on terminating gateways GH-20360 [GH-20417]
- connect: Remove code coupling where the xDS capacity controller could negatively affect raft autopilot performance. [GH-20511]
- logging: add /api prefix to v2 resource endpoint logs [GH-20352]
- mesh: Fix bug where envoy extensions could not be configured with "permissive" mTLS mode. Note that envoy extensions currently do not apply to non-mTLS traffic in permissive mode. [GH-20406]