-
Notifications
You must be signed in to change notification settings - Fork 321
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update Envoy #3116
Update Envoy #3116
Conversation
@@ -3233,7 +3233,7 @@ terminatingGateways: | |||
gateways: | |||
- name: terminating-gateway | |||
|
|||
# [DEPRECATED] Use connectInject.apiGateway instead. This stanza will be removed with the release of Consul 1.17 | |||
# [DEPRECATED] Use connectInject.apiGateway instead. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Per the service mesh team, removal of this field has been postponed to a later Consul release.
@@ -3248,7 +3248,7 @@ apiGateway: | |||
# The name (and tag) of the Envoy Docker image used for the | |||
# apiGateway. For other Consul compoenents, imageEnvoy has been replaced with Consul Dataplane. | |||
# @default: envoyproxy/envoy:<latest supported version> | |||
imageEnvoy: "envoyproxy/envoy:v1.25.1" | |||
imageEnvoy: "envoyproxy/envoy:v1.25.11" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
v1.25.x is the latest version that I saw for the legacy API Gateway. I'm not sure how/why the value on this branch is so out-of-date, but I've bumped it to the latest for consistency with the other branches.
This PR updates Envoy to the latest patch releases to address CVE-2023-44487.
Note that the Envoy image version is only applicable to the legacy API Gateway since the Envoy sidecars are now packaged directly with Consul dataplane.
Release branch PRs:
Checklist:
Tests added