●Change8

Migrating to Consul Connect ent-changelog-1.22.0

Version ent-changelog-1.22.0 introduces 2 breaking changes. This guide details how to update your code.

Released: 12/2/2025

2
Breaking Changes
3
Migration Steps
8
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

Envoy (version support change)Consul KV endpointConsul event endpointagent/self API/v1/operator/utilization API`consul operator utilization` subcommand`snapshot agent` CLIember component methods (removed send action)

Breaking Changes

●Issue #1

Envoy version support changed: Support for Envoy 1.31.10 is removed; users must now use Envoy 1.35.3 or newer.

●Issue #2

Key name validation added to the key/value endpoint: This is a breaking change that fixes path traversal attacks. It can be disabled using the `DisableKVKeyValidation` config if necessary.

Migration Steps

  1. 1
    If you rely on Envoy versions older than 1.35.3, you must upgrade your environment to use Envoy 1.35.3 or newer.
  2. 2
    Review configurations related to the key/value endpoint if you encounter validation errors; consider enabling `DisableKVKeyValidation` if necessary to maintain existing behavior while migrating.
  3. 3
    If using IPv6 or dual-stack configurations, note that `connect envoy bootstrap` defaults to `::1` for IPv6 agent bind addresses, and `connect upstream.local_bind_address` and `proxy.local_service_address` default to `::1` for IPv6 agents.

Release Summary

This release shares the Consul Enterprise changelog, focusing heavily on security hardening, including Envoy upgrades and DoS mitigations. It also introduces new features like multi-port service registration and OIDC client authentication improvements.

Need More Details?

View the full release notes and all changes for Consul Connect ent-changelog-1.22.0.

View Full Changelog