v1.9.3

1.9.3 (January 27, 2026)

SECURITY:

• Update the Consul Build Go base image to alpine3.23 [GH-5065]

BUG FIXES:

• cni: Updates code logic in CNI during application pod creation. [GH-5062]

v1.8.8

1.8.8 (January 27, 2026)

SECURITY:

• Update the Consul Build Go base image to alpine3.23 [GH-5065]

v1.7.10

1.7.10 (January 27, 2026)

SECURITY:

• Update the Consul Build Go base image to alpine3.23 [GH-5065]

v1.8.7

1.8.7 (December 23, 2025)

SECURITY:

• go: upgrade go version to 1.25.5 [GH-5051]

IMPROVEMENTS:

• api-gateway: Add support for file-based Envoy access log sinks via proxy-defaults. Previously, only stdout logging was supported.
  connect-inject: When proxy-defaults enables file-based access logs, automatically inject an emptyDir volume and volumeMount into the consul-dataplane container. [GH-5008]
• api-gateway: Added backward compatibility support for file-based Envoy access log sinks via proxy-defaults. [GH-5026]
• client: Add optional startup staggering for client ACL init to spread /v1/acl/login calls and reduce login storms on large clusters. Controlled via client.aclInit.startupStagger.* values (disabled by default). [GH-5021]

v1.7.9

1.7.9 (December 23, 2025)

SECURITY:

• go: upgrade go version to 1.25.5 [GH-5047]

IMPROVEMENTS:

• api-gateway: Add support for file-based Envoy access log sinks via proxy-defaults. Previously, only stdout logging was supported.
  connect-inject: When proxy-defaults enables file-based access logs, automatically inject an emptyDir volume and volumeMount into the consul-dataplane container. [GH-5008]
• api-gateway: Added backward compatibility support for file-based Envoy access log sinks via proxy-defaults. [GH-5026]
• client: Add optional startup staggering for client ACL init to spread /v1/acl/login calls and reduce login storms on large clusters. Controlled via client.aclInit.startupStagger.* values (disabled by default). [GH-5021]

v1.9.2

1.9.2 (December 23, 2025)

SECURITY:

• Add microdnf upgrade in dockerfile to include future security fixes [GH-4982]
• go: upgrade go version to 1.25.5 [GH-5052]

IMPROVEMENTS:

• api-gateway: Add support for file-based Envoy access log sinks via proxy-defaults. Previously, only stdout logging was supported.
  connect-inject: When proxy-defaults enables file-based access logs, automatically inject an emptyDir volume and volumeMount into the consul-dataplane container. [GH-5008]
• api-gateway: Added backward compatibility support for file-based Envoy access log sinks via proxy-defaults. [GH-5026]
• client: Add optional startup staggering for client ACL init to spread /v1/acl/login calls and reduce login storms on large clusters. Controlled via client.aclInit.startupStagger.* values (disabled by default). [GH-5021]

v1.7.8

1.7.8 (2 December, 2025)

SECURITY:

• crypto: upgrade golang.org/x/crypto to v0.45.0 to fix GO-2025-4134, GO-2025-4135, GO-2025-4116, GHSA-f6x5-jh6r-wrfv
  containerd: upgrade github.com/containerd/containerd to v1.7.29 to fix GO-2025-4100, GO-2025-4108 [GH-4990]

FEATURES:

• cli: Updated the status command to output the consul client & deployments status as well along with existing ones. [GH-4790]

IMPROVEMENTS:

• cni: fixed race conditions with older versions where no cleanup was done for binary
  cni: cleanup of cni binary on previous pod deletion to improve security posture [GH-4757]

v1.9.1

1.9.1 (2 December, 2025)

SECURITY:

• crypto: upgrade golang.org/x/crypto to v0.45.0 to fix GO-2025-4134, GO-2025-4135, GO-2025-4116, GHSA-f6x5-jh6r-wrfv
  containerd: upgrade github.com/containerd/containerd to v1.7.29 to fix GO-2025-4100, GO-2025-4108 [GH-4990]

FEATURES:

• api-gateway: Add support for configuring Kubernetes probes (liveness, readiness, startup) per-Gateway via annotations. Use consul.hashicorp.com/liveness-probe, consul.hashicorp.com/readiness-probe, and consul.hashicorp.com/startup-probe annotations with JSON probe configuration to customize health checks for individual API Gateways. [GH-4901] [GH-4901]
• cli: Add debug command to collect configs, logs, and other data from a Consul on Kubernetes deployment in a archive/dir. [GH-4800]
• cli: Updated the status command to output the consul client & deployments status as well along with existing ones. [GH-4790]
• cli: added new -capture flag to proxy loglevel command, enabling users to capture logs for certain duration. [GH-4788]

v1.8.6

1.8.6 (2 December, 2025)

SECURITY:

• crypto: upgrade golang.org/x/crypto to v0.45.0 to fix GO-2025-4134, GO-2025-4135, GO-2025-4116, GHSA-f6x5-jh6r-wrfv
  containerd: upgrade github.com/containerd/containerd to v1.7.29 to fix GO-2025-4100, GO-2025-4108 [GH-4990]

FEATURES:

• api-gateway: Add support for configuring Kubernetes probes (liveness, readiness, startup) per-Gateway via annotations. Use consul.hashicorp.com/liveness-probe, consul.hashicorp.com/readiness-probe, and consul.hashicorp.com/startup-probe annotations with JSON probe configuration to customize health checks for individual API Gateways. [GH-4901] [GH-4901]
• cli: Updated the status command to output the consul client & deployments status as well along with existing ones. [GH-4790]

IMPROVEMENTS:

• cni: fixed race conditions with older versions where no cleanup was done for binary
  cni: cleanup of cni binary on previous pod deletion to improve security posture [GH-4757]

v1.9.0

1.9.0 (October 27, 2025)

NOTE: Consul K8s 1.9.x is compatible with Consul 1.22.x and Consul Dataplane 1.9.x. Refer to our compatibility matrix for more info.

RELEASE HIGHLIGHTS:

• Enhanced IPv6 Support: Improved CNI kubeconfig generation with better Kubernetes API server URL handling for IPv6 environments
• Updated Dependencies: All Consul submodules updated to their latest GA versions for improved stability and compatibility
• Security Improvements: Go runtime upgraded to 1.25.3 with latest security patches

BUG FIXES:

• control-plane: Enhanced IPv6 support in CNI kubeconfig generation for better Kubernetes API server URL handling [GH-4897]

IMPROVEMENTS:

• deps: update consul/api to v1.33.0
• deps: update consul/sdk to v0.17.0
• deps: update consul/proto-public to v0.7.0
• deps: update consul/envoyextensions to v0.9.0
• deps: update consul/troubleshoot to v0.8.0

SECURITY:

• go: upgrade go version to 1.25.3 [GH-4897]