HashiCorp Consul 1.11 adds important new features: multi-tenancy with administrative partitions and a new installation-and-management Consul Kubernetes CLI.
We are pleased to announce the HashiCorp Consul 1.11 beta release. This release represents yet another step forward in our effort to help organizations run Consul to reduce operational complexity and seamlessly integrate service mesh into their application workflows. Consul 1.11 contains a number of important new features, including multi-tenancy with administrative partitions and a new Consul Kubernetes CLI.
Two major challenges organizations face when scaling a service mesh are:
Typically, operators would have to manage separate control planes for each Kubernetes cluster or VM group, as shown in the architecture below:
This approach is not scalable for two reasons:
Scaling a more complex architecture, like the one illustrated below, requires enormous amounts of coordination and compute resources, often creating more overhead than operations teams can easily manage.
Consul 1.11 multi-tenancy with admin partitions allows enterprises to provide a shared service-networking solution for multiple tenants — across Kubernetes and VM deployments — within a single Consul datacenter. To support various deployment patterns, admin partitions enable multiple Kubernetes clusters from different tenants to share a single Consul control plane. Admin partitions also help enterprises improve operational efficiency while providing individual teams with organizational autonomy and isolation when managing their services.
This diagram illustrates a single Consul control plane for multiple Kubernetes clusters and VMs.
Consul 1.11 multi-tenancy with admin partitions allows multiple namespaces with the same name to exist independently of each other. Access control lists (ACLs) are augmented to allow a partition administrator full control over their local resources without needing operator permissions for the entire cluster. That helps operations teams to better scale and manage complex architectures, as shown below:
Consul 1.11 also provides a first-class Consul Kubernetes command line interface (CLI) for a new way of interacting with Consul when deploying on Kubernetes. The primary goal for the Consul Kubernetes CLI is to lower the barrier to adoption for developers who want to use a Consul service mesh on Kubernetes.
Prior to version 1.11, Consul supported only a Helm install-and-uninstall flow. Although Helm provides a fairly easy install and uninstall mechanism for Kubernetes users, a Helm chart can expose an overwhelming number of options. As an alternative, a custom-built CLI provides a more curated experience for those who primarily want to try out Consul service mesh as quickly as possible. The Consul Kubernetes CLI provides a simpler user experience, reduces the number of steps to get a deployment running, and enables preset configurations for application and Kubernetes teams.
Previously, in order to customize your installation, you had to create a
values.yaml file and provide config options as described in the Helm Chart Configuration docs, as shown here:
helm repo add hashicorp https://helm.releases.hashicorp.com$ cat > dc1.yaml <<EOFglobal: name: consul enabled: true datacenter: dc1server: replicas: 1connectInject: enabled: truecontroller: enabled: trueEOFhelm install -f config.yaml consul hashicorp/consul --version "0.35.0"
With the Consul Kubernetes CLI, installing Consul on Kubernetes is as simple as:
In addition, there are new preset options to install Consul on Kubernetes in a pre-configured demo or secure setting:
# Install with sidecar injection enabledconsul-k8s install -preset=demo # Install with sidecar injection, TLS and ACLs enabledconsul-k8s install -preset=secure
We are excited for users to try this release of Consul and further expand their service mesh implementations. The Consul 1.11 release includes enhancements for all types of users leveraging Consul for service discovery and service mesh, across both containerized and non-containerized environments.
Our goal with Consul is to provide an enterprise-ready, consistent control plane to discover and securely connect any application. For more information about Consul, please visit our documentation. To get started with the Consul 1.11, please download operating system binaries from our release page or install the latest v0.35.0 Helm chart that supports Consul 1.11 for Kubernetes. Multi-tenancy with admin partitions is part of the Consul Enterprise binaries, and you can get started with a free Consul Enterprise trial here.
Visit us at AWS re:Invent 2021 in Las Vegas, Nov. 29 - Dec. 3 for breakout sessions, expert talks, and product demos to accelerate your cloud strategy.
HashiCorp Consul service mesh on Amazon ECS is now generally available and ready for production environments.
A recap of key announcements and presentations from HashiConf Global 2021 — focused on the needs and interests of enterprises.