Consul ECS 0.10.x

Release highlights

Consul 2.0 support: Consul on ECS 0.10.x supports Consul 2.0.x, in addition to Consul 1.21.x and 1.22.x. Refer to the Consul on ECS compatibility matrix for details.
Outlier detection settings (0.10.0): The service.networkResilienceConfig.outlierDetection block in the ECS_CONFIG_JSON configuration supports the consecutive5xx, enforcingConsecutiveGatewayFailure, and maxEjectionPercent fields. Use them to detect gateway failures and to control the percentage of upstream instances that Envoy ejects through passive health checks. Refer to passive health checks for more information.
Health sync improvements (0.10.0): The health-sync command applies health check statuses for all registered containers, including the consul-dataplane container, and writes them to Consul in a single catalog registration request.
FIPS 140-3 (0.10.1): FIPS builds of Consul on ECS use the Go Cryptographic Module, which holds FIPS 140-3 certificate #5247, instead of FIPS 140-2 BoringCrypto. Refer to Deploy FIPS 140-3 compliant Consul servers for more information.
Security updates (0.10.1): Consul on ECS 0.10.1 is built with Go 1.26.8 and includes dependency upgrades that address CVEs.

FIPS artifact names changed in 0.10.1. FIPS 140-3 builds use the fips1403 suffix instead of fips1402. If you pin FIPS artifacts, update the version metadata from +fips1402 to +fips1403 and the container image tag from -fips1402 to -fips1403. For example, use the public.ecr.aws/hashicorp/consul-ecs-fips:0.10.1-fips1403 image.
Use the matching version of the Consul ECS Terraform modules. The consul-ecs binary and the Terraform modules are tightly coupled. For example, use the consul-ecs 0.10.1 binary with the 0.10.1 Terraform modules.

The changelogs for this major release version and any maintenance versions are listed below.

Note

These links take you to the changelogs on the GitHub website.

The changelogs for the Consul ECS Terraform modules are available on the terraform-aws-consul-ecs releases page.