Skip to content

Latest commit

 

History

History
101 lines (56 loc) · 5.18 KB

CHANGELOG.md

File metadata and controls

101 lines (56 loc) · 5.18 KB
Raw

The changelog format is based on Keep a Changelog.

This project uses Semantic Versioning - MAJOR.MINOR.PATCH

Changelog

v1.2.0 (2024-10-02)

Changed

  • Readded direct package dependency on cryptography

Fixed

  • Change unseal query to be always unauthenticated. #85

Added

  • Added support for credential orchestration in Salt-SSH wrappers, added wrappers for vault, vault_db, vault_pki modules #54
  • Added vault_ssh execution, state and wrapper modules for managing and using the SSH secret backend #58
  • Improved handling of KV v2 secret versions #61
  • Added vault_secret state module for statefully managing secrets #62

v1.1.1 (2024-07-24)

Changed

  • Required x509_v2 modules to be available for specific parameters to vault_pki, dropped direct dependency on cryptography #78

Fixed

  • Fixed vault.update_config crash #77

v1.1.0 (2024-07-23)

Removed

  • Dropped support for Python 3.7 #59
  • Dropped support for Salt 3005 #70

Fixed

  • Fixed a crash when renewing/revoking leases that have been revoked on the Vault server early #45

Added

  • Added an optional switch for validating cached leases with the Vault server before returning them from the LeaseStore #46
  • Implemented setting per-lease defaults of lifecycle parameters #47
  • Implemented caching arbitrary metadata together with a lease and included it in expiry events #48
  • Added a LeaseStore method for listing cached lease information #49
  • Added vault_db modules for management and usage of the Vault database secret backend #52
  • Added vault_lease beacon module to monitor and renew cached leases #53
  • Added vault_pki modules for interfacing with the PKI backend and managing X.509 certificates #58
  • Added support for retry logic and specific connection settings in vault:client #65

v1.0.0 (2024-04-23)

Deprecated

  • Deprecated Vault pillar configuration with conf parameter and path= prefix #30

Changed

  • Changed Vault pillar module configuration #30

Fixed

  • Fixed Salt master does not renew token #10
  • Fixed vault module fetching more than one secret in one run with single-use tokens #11
  • Fixed Vault verify option to work on minions when only specified in master config #12
  • Fixed vault command errors configured locally #13
  • Fixed sdb.get_or_set_hash with Vault single-use tokens #14
  • Fixed Vault session storage to allow unlimited use tokens #15
  • Fixed salt-minion 3006.0 KeyError without 'vault' config key #22
  • Fixed verify parameter for unwrap requests #34

Added

  • Added Vault AppRole and identity issuance to minions #16
  • Added Vault AppRole auth mount path configuration option #17
  • Added distribution of Vault authentication details via response wrapping #18
  • Added Vault token lifecycle management #19
  • Added Vault lease management utility #20
  • Added patch option to Vault SDB driver #21
  • Added inline specification of trusted CA root certificate for Vault #23
  • Added support for dictionary keys in pattern #26