Skip to content

Latest commit

 

History

History
137 lines (106 loc) · 6.2 KB

CHANGELOG.md

File metadata and controls

137 lines (106 loc) · 6.2 KB

Unreleased

Build:

  • Test with k8s versions 1.27-1.31

Dependency updates

  • github.com/hashicorp/go-sockaddr v1.0.6 -> v1.0.7
  • github.com/hashicorp/vault/api v1.14.0 -> v1.15.0
  • github.com/hashicorp/vault/sdk v0.13.0 -> v0.14.0
  • k8s.io/api v0.31.0 -> v0.31.2
  • k8s.io/apimachinery v0.31.0 -> v0.31.2

0.20.0 (Sept 4, 2024)

Build:

  • Build with go 1.22.6
  • Test with k8s versions 1.26-1.30
  • Migrate from gopkg.in/go-jose/go-jose.v2 to github.com/go-jose/go-jose/v4

Dependency updates:

  • github.com/go-test/deep v1.1.0 -> v1.1.1
  • github.com/hashicorp/cap v0.6.0 -> v0.7.0
  • github.com/hashicorp/go-hclog v1.6.2 -> v1.6.3
  • github.com/hashicorp/vault/api v1.12.2 -> v1.14.0
  • github.com/hashicorp/vault/sdk v0.11.1 -> v0.13.0
  • k8s.io/api v0.29.3 -> v0.31.0
  • k8s.io/apimachinery v0.29.3 -> v0.31.0

0.19.0 (May 20, 2024)

Changes

  • Updated gopkg.in/square/[email protected] to gopkg.in/go-jose/[email protected]
  • Updated dependencies
    • github.com/docker/docker v24.0.7+incompatible -> v24.0.9+incompatible
    • github.com/go-jose/go-jose/v3 v3.0.1 -> v3.0.3
    • github.com/hashicorp/cap v0.4.1 -> v0.6.0
    • github.com/hashicorp/vault/api v1.11.0 -> v1.12.2
    • github.com/hashicorp/vault/sdk v0.10.2 -> v0.11.1
    • golang.org/x/net v0.22.0 -> v0.23.0
    • k8s.io/api v0.29.1 -> v0.29.3
    • k8s.io/apimachinery v0.29.1 -> v0.29.3

Improvements

  • Allow TLS client to use the host's root CA set when no CA certificates are provided and disable_local_ca_jwt is true if running Vault in a Kubernetes pod. Additionally, validate the configuration's provided CA PEM bundle. GH-238

0.18.0 (Feb 2, 2024)

Changes

  • Build with go 1.21.3
  • Test with k8s versions 1.24-1.28
  • Updated dependencies GH-209 GH-225 GH-230:
    • github.com/docker/docker v24.0.5+incompatible -> v24.0.7+incompatible
    • github.com/go-jose/go-jose/v3 v3.0.0 -> v3.0.1
    • github.com/hashicorp/cap v0.3.4 -> v0.4.1
    • github.com/hashicorp/go-hclog v1.5.0 -> v1.6.2
    • github.com/hashicorp/go-sockaddr v1.0.2 -> v1.0.6
    • github.com/hashicorp/vault/api v1.9.2 -> v1.11.0
    • github.com/hashicorp/vault/sdk v0.9.2 -> v0.10.2
    • golang.org/x/crypto v0.11.0 -> v0.14.0
    • golang.org/x/mod v0.12.0 -> v0.14.0
    • golang.org/x/net v0.13.0 -> v0.19.0
    • golang.org/x/sys v0.10.0 -> v0.13.0
    • golang.org/x/text v0.11.0 -> v0.13.0
    • golang.org/x/tools v0.12.0 -> v0.16.1
    • k8s.io/api v0.28.1 -> v0.29.1
    • k8s.io/apimachinery v0.28.1 -> v0.29.1

Features

  • Use annotations with the prefix vault.hashicorp.com/alias-metadata- from the client token's associated service account as alias metadata for the Vault entity GH-226

Improvements

  • Support bound service account namespace selector GH-218
  • Indicate that token reviewer JWT is set on config read GH-221

0.17.1 (Sept 7, 2023)

Improvements

  • Allow any token type for TokenReviewer validation GH-207

0.17.0 (Aug 31, 2023)

  • update dependencies GH-206
    • github.com/hashicorp/cap v0.3.4
    • github.com/hashicorp/vault/api v1.9.2
    • github.com/hashicorp/vault/sdk v0.9.2
    • k8s.io/api v0.28.1
    • k8s.io/apimachinery v0.28.1

0.16.0 (May 25, 2023)

  • Add display attributes for OpenAPI OperationID's GH-192
  • update dependencies GH-196
    • github.com/hashicorp/cap v0.3.0
    • github.com/hashicorp/vault/api v1.9.1
    • k8s.io/api v0.27.2
    • k8s.io/apimachinery v0.27.2

0.15.1 (March 27, 2023)

Changes

  • enable plugin multiplexing GH-186
  • update dependencies
    • github.com/hashicorp/vault/api v1.9.0
    • github.com/hashicorp/vault/sdk v0.8.1
    • github.com/go-test/deep v1.0.8 -> v1.1.0
    • github.com/hashicorp/go-hclog v1.3.1 -> v1.5.0
    • k8s.io/api v0.25.3 -> v0.26.3
    • k8s.io/apimachinery v0.25.3 -> v0.26.3

0.15.0 (February 9, 2023)

Changes

  • Return HTTP 403 error code instead of 500 when JWT validation fails due to invalid issuer, audiences, or signing algorithm GH-179
  • Checks the Kubernetes API is audience-aware by checking for at least one compatible audience in the response from TokenReviews GH-179
  • Update to Go 1.19 GH-166
  • Update dependencies GH-166: | MODULE | VERSION | NEW VERSION | DIRECT | VALID TIMESTAMPS | |---------------------------------|------------------------------------|-------------|--------|------------------| | github.com/hashicorp/go-hclog | v1.1.0 | v1.3.1 | true | true | | github.com/hashicorp/go-uuid | v1.0.2 | v1.0.3 | true | true | | github.com/hashicorp/go-version | v1.2.0 | v1.6.0 | true | true | | github.com/hashicorp/vault/api | v1.5.0 | v1.8.2 | true | true | | github.com/hashicorp/vault/sdk | v0.5.3 | v0.6.1 | true | true | | k8s.io/api | v0.0.0-20190409092523-d687e77c8ae9 | v0.25.3 | true | true | | k8s.io/apimachinery | v0.22.2 | v0.25.3 | true | true |