Consul 1.22.0

We are pleased to announce the following Consul updates.

Release highlights

• IPv6 address support for VMs and Kubernetes. This version introduces support for both IPv4 and IPv6 network addresses in agent and service configurations when Consul runs on VMs or Kubernetes. Although both address types are supported, we recommend using only one type per Consul datacenter. Other runtimes, including RedHat OpenShift, Nomad, and ECS do not support IPv6 addresses in this release.
• Multi-port service support for service discovery. Consul service definitions now include an optional ports parameter so that the Consul catalog can register multi-port services for service discovery operations. For more information and an example service definition, refer to the service definition reference documentation.
  • Multi-port support for service discovery includes support for registering multi-port Kubernetes Services with Kubernetes Service sync.
  • You can also address a service running a specific port using the new port field in Consul DNS.
• Azure Managed Identity support for backups. The Consul Enterprise snapshot agent now supports authentication with Azure Blob Storage using Azure Managed Service Identities (MSI). This support aligns with modern cloud security best practices, simplifies configuration for operators, and removes the need to store static credentials in configuration files.
• JWT integration with OIDC for Consul UI SSO. This Consul release enables Proof Key for Code Exchange (PKCE) in the OIDC authentication flow by default. As a result, when you configure Consul to use an OIDC provider for logging in to the Consul UI, you can now use a JWT instead of a client secret. This change enhances security and aligns with industry best practices for improved compliance. Refer to ACL OpenID Connect (OIDC) auth method configuration reference for configuration specifications and an example configuration.
• Manual license utilization reporting. This release introduces the consul operator utilization CLI command and the /operator/utilization API endpoint to generate and submit Enterprise license utilization information to HashiCorp. To support Consul operations in air-gapped environments, you can also generate this report and submit it manually. For more information, refer to Manual license utilization reporting.

Upgrading

For more detailed information, please refer to the upgrade details page and the changelogs.

Known issues

There are no known issues at this time. These release notes are updated as issues are discovered.

Report issues on Github.

Changelogs

The changelogs for this major release version and any maintenance versions are listed below.

• 1.22.0