RepoJournal
HashiCorp

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

Keep up with HashiCorp in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

CONSUL K8S CLOSES API-GATEWAY FILTER LOOP, NOMAD PIPELINES RAFT WRITES

By RepoJournal · Filed · About HashiCorp

Consul K8s fixed a silent reconciliation failure where external authorization filter changes weren't reaching Consul, while Nomad cut plan applier bottleneck by overlapping evaluation with application.

The API gateway fix [1] addressed a critical gap in httpRouteRulesEqual(), which compared RetryFilter, TimeoutFilter, and JWT but skipped ExtAuthz entirely. Any reconciler cycle that only changed Filters.ExtAuthz would incorrectly report EntriesEqual as true and skip the Consul write, leaving gateways in a stale state. Nomad's plan applier gains serious throughput [2] by pipelining Raft writes: evaluation of one plan now overlaps with application of the previous one, cutting the bottleneck that historically serialized these stages. The tradeoff is explicit: if a Raft transaction fails, the evaluated plan gets discarded, and there's a known narrow race where node updates can arrive mid-evaluation. Terraform provider Vault bumped 13 dependencies [3] across AWS SDK, Google Cloud IAM, and related packages in a backward-compatible group update. Nomad's scheduler also removed a tautological nil-check [4] and fixed Java driver workdir config decoding [5], both cleanup work that keeps the codebase tight.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] api-gateway: fix ext_authz filter update propagation ↗ hashicorp/consul-k8s
  2. [2] pipeline raft writes in plan applier ↗ hashicorp/nomad
  3. [3] build(deps): bump the gomod-backward-compatible group across 1 directory with 13 updates ↗ hashicorp/terraform-provider-vault
  4. [4] scheduler: Remove system canarying deployment state tautological. ↗ hashicorp/nomad
  5. [5] drivers/java: Fix decoding of work dir config object. (#28330) hashicorp/nomad

Quick answers

What shipped in HashiCorp on July 30, 2026?
Consul K8s fixed a silent reconciliation failure where external authorization filter changes weren't reaching Consul, while Nomad cut plan applier bottleneck by overlapping evaluation with application. In total, 24 commits and 15 pull requests landed.
Who contributed to HashiCorp on July 30, 2026?
8 developers shipped this update, including bharath-k1999, dependabot, Jonathan Frappier, hc-github-team-tf-core, SarahFrench, locker95, tgross, and James Rasell.
What were the notable HashiCorp updates?
api-gateway: fix ext_authz filter update propagation, pipeline raft writes in plan applier, and build(deps): bump the gomod-backward-compatible group across 1 directory with 13 updates.

More from @hashicorp

Daily updates, in your inbox

Follow HashiCorp

Keep up with HashiCorp in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?