hashicorp/consul-k8s v1.7.0

on GitHub

1.7.0 (May 7, 2025)

NOTE: Consul K8s 1.7.x is compatible with Consul 1.21.x and Consul Dataplane 1.7.x. Refer to our compatibility matrix for more info.

FEATURES:

• control-plane: Add available Zone Kubernetes Topology Metadata for NodePort Service when Syncing Kubernetes Services. [GH-4470]

IMPROVEMENTS:

• security: Support running Consul under Pod Security Admissions (PSA) restricted mode. [GH-4478]
• helm: Add support for server.snapshotAgent.extraVolumes and server.snapshotAgent.extraEnvironmentVars so privileged credentials can be configured for the snapshot agent. [GH-4471]
• security: Support running Consul under Pod Security Admissions (PSA) restricted mode. [GH-4478]

BUG FIXES:

• sync-catalog: Enable the user to purge the registered services by passing parent node and necessary filters. [GH-4255]

SECURITY:

• Update golang.org/x/net to v0.38.0 to address GHSA-vvgc-356p-c3xw.
• Update github.com/go-jose/go-jose/v3 to v3.0.4 to address GO-2025-3485.
• Update github.com/containerd/containerd to v1.7.27 to address GHSA-265r-hfxg-fhmg.
• Upgrade to Go 1.23.8 to fix CVE GO-2025-3563