The Wire · Showcase
CONSUL-K8S PATCHES HELM VALUE PARSING BUG BLOCKING CUSTOM GATEWAY DEPLOYMENTS
By RepoJournal · Filed · About HashiCorp
A critical boolean-to-string conversion flaw in the consul-k8s CLI is preventing users from deploying custom gateways with resource limits, fixed today across two merged PRs.
The consul-k8s CLI was parsing Helm values.yaml files with strict type checking, rejecting legitimate boolean representations that the charts themselves accept [1]. This broke deployments where operators passed custom CPU/memory limits to custom gateway configurations because the resources-ocp filename wasn't being resolved correctly [2]. Both fixes shipped: the value parsing issue is resolved [3] and the custom gateway filename mismatch is patched [4]. In parallel, consul proper is hardening its container image with curl 8.20.0 to address seven CVEs [5], and UBI images are being bumped to 9.8 for additional security coverage [6]. Meanwhile, consul-ecs is migrating to v2 APIs and Go 1.26 [7], a significant modernization that requires testing against your ECS deployment patterns.
Action items
- → Upgrade consul-k8s CLI immediately if using custom gateways with resource limits hashicorp/consul-k8s [immediate]
- → Patch Consul containers with curl 8.20.0 to close CVE chain hashicorp/consul [immediate]
- → Test consul-ecs v2 API migration against your ECS task definitions hashicorp/consul-ecs [plan]
- → Verify custom gateway log-level propagation from Helm chart [ref:2] hashicorp/consul-k8s [monitor]
References
- [1] Fix boolean and string conversion issue (#5327) hashicorp/consul-k8s
- [2] fix(custom-gw): filename mismatch ↗ hashicorp/consul-k8s
- [3] Fix boolean and string conversion issue ↗ hashicorp/consul-k8s
- [4] fix(custom-gw): filename mismatch (#5334) hashicorp/consul-k8s
- [5] Fix CVEs ↗ hashicorp/consul
- [6] Ubi image version update-9.8 ↗ hashicorp/consul
- [7] Update imports to use v2 API and bump Go version to 1.26 ↗ hashicorp/consul-ecs
- [8] passing log-level chart to consul agent ↗ hashicorp/consul-k8s
FAQ
- What changed in HashiCorp on May 21, 2026?
- A critical boolean-to-string conversion flaw in the consul-k8s CLI is preventing users from deploying custom gateways with resource limits, fixed today across two merged PRs.
- What should HashiCorp teams do about it?
- Upgrade consul-k8s CLI immediately if using custom gateways with resource limits • Patch Consul containers with curl 8.20.0 to close CVE chain • Test consul-ecs v2 API migration against your ECS task definitions
- Which HashiCorp repositories shipped on May 21, 2026?
- hashicorp/consul-k8s, hashicorp/consul, hashicorp/consul-ecs