Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Envoy #3116

Merged
merged 2 commits into from Oct 23, 2023
Merged

Update Envoy #3116

merged 2 commits into from Oct 23, 2023

Conversation

cthain
Copy link
Contributor

@cthain cthain commented Oct 23, 2023

This PR updates Envoy to the latest patch releases to address CVE-2023-44487.

Note that the Envoy image version is only applicable to the legacy API Gateway since the Envoy sidecars are now packaged directly with Consul dataplane.

Release branch PRs:

Checklist:

@cthain cthain self-assigned this Oct 23, 2023
@cthain cthain added the pr/no-backport signals that a PR will not contain a backport label label Oct 23, 2023
@@ -3233,7 +3233,7 @@ terminatingGateways:
gateways:
- name: terminating-gateway

# [DEPRECATED] Use connectInject.apiGateway instead. This stanza will be removed with the release of Consul 1.17
# [DEPRECATED] Use connectInject.apiGateway instead.
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Per the service mesh team, removal of this field has been postponed to a later Consul release.

@@ -3248,7 +3248,7 @@ apiGateway:
# The name (and tag) of the Envoy Docker image used for the
# apiGateway. For other Consul compoenents, imageEnvoy has been replaced with Consul Dataplane.
# @default: envoyproxy/envoy:<latest supported version>
imageEnvoy: "envoyproxy/envoy:v1.25.1"
imageEnvoy: "envoyproxy/envoy:v1.25.11"
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

v1.25.x is the latest version that I saw for the legacy API Gateway. I'm not sure how/why the value on this branch is so out-of-date, but I've bumped it to the latest for consistency with the other branches.

@cthain cthain marked this pull request as ready for review October 23, 2023 15:31
charts/consul/Chart.yaml Show resolved Hide resolved
@cthain cthain merged commit 2aac339 into main Oct 23, 2023
50 of 51 checks passed
@cthain cthain deleted the cthain/net-5945/main branch October 23, 2023 22:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pr/no-backport signals that a PR will not contain a backport label
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants