Skip to content

Contour 0.15.1

Choose a tag to compare

@davecheney davecheney released this 08 Oct 20:24

Contour 0.15.1 is minor patch release for the Contour 0.15 series.

All Contour users should upgrade to Contour 0.15.1 and Envoy 1.11.2.

Envoy 1.11.2

See the Envoy 1.11.2 announcement for details on the vulnerabilities.

See the upgrading section below for details.

X-Request-Id

Contour 0.15.1 preseves the X-Request-Id header if present in the client request.

Fixes #1487

TLS certificate validation

Contour 0.15.1 now attempts to validate the contents of a TLS certificate before presenting it to Envoy.
This validation only extends to asserting the certificate is well formed. Expired, incorrect hostname details, or otherwise well formed but invalid certificates are not rejected. IngressRoutes that reference invalid secrets will have their Status: fields set accordingly.

Fixes #1065

Go 1.13.1

Contour 0.15.1 is built using Go 1.13.1.

Upgrading

If you are already running Contour 0.15.0 the upgrade instructions are as follows:

  • Change the Contour image version to v0.15.1.
  • Change the Envoy image version to v1.11.2.

If you are running Contour 0.15.0 or earlier, please see the upgrade documentation.