Contour 0.15.1
Contour 0.15.1 is minor patch release for the Contour 0.15 series.
All Contour users should upgrade to Contour 0.15.1 and Envoy 1.11.2.
Envoy 1.11.2
See the Envoy 1.11.2 announcement for details on the vulnerabilities.
See the upgrading section below for details.
X-Request-Id
Contour 0.15.1 preseves the X-Request-Id header if present in the client request.
Fixes #1487
TLS certificate validation
Contour 0.15.1 now attempts to validate the contents of a TLS certificate before presenting it to Envoy.
This validation only extends to asserting the certificate is well formed. Expired, incorrect hostname details, or otherwise well formed but invalid certificates are not rejected. IngressRoutes that reference invalid secrets will have their Status: fields set accordingly.
Fixes #1065
Go 1.13.1
Contour 0.15.1 is built using Go 1.13.1.
Upgrading
If you are already running Contour 0.15.0 the upgrade instructions are as follows:
- Change the Contour image version to
v0.15.1. - Change the Envoy image version to
v1.11.2.
If you are running Contour 0.15.0 or earlier, please see the upgrade documentation.