hashicorp/consul-k8s v2.0.3

on GitHub

2.0.3 (August 11, 2026)

SECURITY:

• Helm: Upgraded to v3.21.3
  Containerd: Removed
  CVEs: Upgraded Helm packages (*to remove containerd packages) to address a few CVEs [GH-5572]
• security: upgrade net and grpc packages to address a few CVEs [GH-5581]

IMPROVEMENTS:

• Upgrade to use Go 1.26.5. [GH-5542]

BUG FIXES:

• api-gateway: Fix ext_authz filter updates not being propagated to Consul when an HTTPRoute's RouteAuthFilter reference is changed in-place. [GH-5516]
• helm: create OpenSSL subject-hash symlinks (<hash>.N) for the CA certificates written to /trusted-cas by global.trustedCAs, so that they are actually trusted via SSL_CERT_DIR. Certificates that share a subject are given sequential suffixes instead of overwriting each other, and the Vault-injected Consul server CA is included when global.secretsBackend.vault.enabled is set. [GH-5527]