NEWS

etcd v3.2.5 (2017-08-04)
- use reverse lookup to match wildcard DNS SAN
- return non-zero exit code on unhealthy 'endpoint health'
- fix unreachable /metrics endpoint when '--enable-v2=false'
- fix grpcproxy to respect 'PrevKv' flag
- add container registry 'gcr.io/etcd-development/etcd'

etcd v3.2.4 (2017-07-19)
- do not block on active client stream when stopping server
- fix gRPC proxy Snapshot RPC error handling

etcd v3.2.3 (2017-07-14)
- let clients establish unlimited streams
- add docker tags for minor versions
  e.g. docker pull quay.io/coreos/etcd:v3.2 to fetch latest v3.2 versions

etcd v3.1.10 (2017-07-14)
- use Go 1.8.3 to fix panic on net/http.CloseNotify
- add docker tags for minor versions
  e.g. docker pull quay.io/coreos/etcd:v3.1 to fetch latest v3.1 versions

etcd v3.2.2 (2017-07-07)
- rate-limit lease revoke on expiration
- extend leases on promote to avoid queueing effect on lease expiration
- use user-provided listen address to connect to gRPC gateway
  - net.Listener rewrites IPv4 0.0.0.0 to IPv6 [::], breaking IPv6 disabled hosts
  - only v3.2.0, v3.2.1 are affected
- accept connection with matched IP SAN but no DNS match
  - don't check DNS entries in certs if there's a matching IP
- fix 'tools/benchmark' watch command

etcd v3.2.1 (2017-06-23)
- fix backend database in-memory index corruption issue on restore (only 3.2.0 is affected)
- fix gRPC gateway Txn marshaling issue
- fix backend database size debugging metrics

etcd v3.2.0 (2017-06-09)
- improved backend read concurrency
- embedded etcd
  - Etcd.Peers field is now []*peerListener
- RPCs
  - add Election, Lock service
- native client etcdserver/api/v3client
  - client "embedded" in the server
- v3 client
  - LeaseTimeToLive returns TTL=-1 resp on lease not found
  - clientv3.NewFromConfigFile is moved to clientv3/yaml.NewConfig
  - STM prefetching
  - add namespace feature
  - concurrency package's elections updated to match RPC interfaces
  - let client dial endpoints not in the balancer
  - add ErrOldCluster with server version checking
  - translate WithPrefix() into WithFromKey() for empty key
- v3 etcdctl
  - add check perf command
  - add --from-key flag to role grant-permission command
  - lock command takes an optional command to execute
- etcd flags
  - add --enable-v2 flag to configure v2 backend (enabled by default)
  - add --auth-token flag
- gRPC proxy
  - proxy endpoint discovery
  - namespaces
  - coalesce lease requests
- gateway
  - support DNS SRV priority
- auth
  - support Watch API
  - JWT tokens
- logging, monitoring
  - server warns large snapshot operations
  - add 'etcd_debugging_server_lease_expired_total' metrics
- security
  - deny incoming peer certs with wrong IP SAN
  - resolve TLS DNSNames when SAN checking
  - reload TLS certificates on every client connection
- release
  - annotate acbuild with supports-systemd-notify
  - add nsswitch.conf to Docker container image
  - add ppc64le, arm64(experimental) builds
  - Go 1.8.3
  - gRPC v1.2.1
  - grpc-gateway to v1.2.0
- v2
  - allow snapshot over 512MB

etcd v3.1.9 (2017-06-09)
- allow v2 snapshot over 512MB

etcd v3.1.8 (2017-05-19)

etcd v3.1.7 (2017-04-28)

etcd v3.1.6 (2017-04-19)
- remove auth check in Status API
- fill in Auth API response header

etcd v3.1.5 (2017-03-27)
- add '/etc/nsswitch.conf' file to alpine-based Docker image
- fix raft memory leak issue
- fix Windows file path issues

etcd v3.1.4 (2017-03-22)

etcd v3.1.3 (2017-03-10)
- use machine default host when advertise URLs are default
  values(localhost:2379,2380) AND if listen URL is 0.0.0.0
- fix 'etcd gateway' schema handling in DNS discovery
- fix sd_notify behaviors in gateway, grpc-proxy

etcd v3.1.2 (2017-02-24)
- use IPv4 default host, by default (when IPv4 and IPv6 are available)
- fix 'etcd gateway' with multiple endpoints

etcd v3.1.1 (2017-02-17)

etcd v2.3.8 (2017-02-17)

etcd v3.1.0 (2017-01-20)
- faster linearizable reads (implements Raft read-index)
- automatic leadership transfer when leader steps down
- etcd uses default route IP if advertise URL is not given
- cluster rejects removing members if quorum will be lost
- SRV records (e.g., infra1.example.com) must match the discovery domain
  (i.e., example.com) if no custom certificate authority is given
  - TLSConfig ServerName is ignored with user-provided certificates
    for backwards compatibility; to be deprecated in 3.2
- discovery now has upper limit for waiting on retries
- etcd flags
  - --strict-reconfig-check flag is set by default
  - add --log-output flag
  - add --metrics flag
- v3 authentication API is now stable
- v3 client
  - add SetEndpoints method; update endpoints at runtime
  - add Sync method; auto-update endpoints at runtime
  - add Lease TimeToLive API; fetch lease information
  - replace Config.Logger field with global logger
  - Get API responses are sorted in ascending order by default
- v3 etcdctl
  - add lease timetolive command
  - add --print-value-only flag to get command
  - add --dest-prefix flag to make-mirror command
  - command get responses are sorted in ascending order by default
- recipes now conform to sessions defined in clientv3/concurrency
- ACI has symlinks to /usr/local/bin/etcd*
- warn on binding listeners through domain names; to be deprecated in 3.2
- experimental gRPC proxy feature

etcd v3.0.16 (2017-01-13)

etcd v3.0.15 (2016-11-11)
- fix cancel watch request with wrong range end

etcd v3.0.14 (2016-11-04)
- v3 etcdctl migrate command now supports --no-ttl flag to discard keys on transform

etcd v3.0.13 (2016-10-24)

etcd v3.0.12 (2016-10-07)

etcd v3.0.11 (2016-10-07)
- server returns previous key-value (optional)
  - clientv3 WithPrevKV option
  - v3 etcdctl put,watch,del --prev-kv flag

etcd v3.0.10 (2016-09-23)

etcd v3.0.9 (2016-09-15)
- warn on domain names on listen URLs (v3.2 will reject domain names)

etcd v3.0.8 (2016-09-09)
- allow only IP addresses in listen URLs (domain names are rejected)

etcd v3.0.7 (2016-08-31)
- SRV records only allow A records (RFC 2052)

etcd v3.0.6 (2016-08-19)

etcd v3.0.5 (2016-08-19)
- SRV records (e.g., infra1.example.com) must match the discovery domain
  (i.e., example.com) if no custom certificate authority is given

etcd v3.0.4 (2016-07-27)
- v2 auth can now use common name from TLS certificate when --client-cert-auth is enabled
- v2 etcdctl ls command now supports --output=json
- Add /var/lib/etcd directory to etcd official Docker image

etcd v3.0.3 (2016-07-15)
- Revert Dockerfile to use CMD, instead of ENTRYPOINT, to support etcdctl run
- Docker commands for v3.0.2 won't work without specifying executable binary paths
- v3 etcdctl default endpoints are now 127.0.0.1:2379

etcd v3.0.2 (2016-07-08)
- Dockerfile uses ENTRYPOINT, instead of CMD, to run etcd without binary path specified

etcd v3.0.1 (2016-07-01)

etcd v3.0.0 (2016-06-30)