Skip to content

Latest commit

 

History

History
255 lines (192 loc) · 9.57 KB

File metadata and controls

255 lines (192 loc) · 9.57 KB

v0.24.1

March 19, 2026

  • Build with go 1.26.1
  • Updated dependencies (#358):
    • github.com/hashicorp/vault/sdk v0.23.0 -> v0.24.0
    • google.golang.org/grpc v1.70.0 -> v1.79.3
    • k8s.io/api v0.35.2 -> v0.35.3
    • k8s.io/apimachinery v0.35.2 -> v0.35.3

v0.24.0

March 19, 2026

  • Tested with Kubernetes versions 1.35-1.31
  • Test with Kind v0.31.0
  • Build with go 1.26.1 (#357)
  • Updated dependencies (#357):
    • github.com/hashicorp/cap v0.11.0 -> v0.12.0
    • github.com/hashicorp/vault/sdk v0.20.0 -> v0.23.0
    • k8s.io/api v0.34.1 -> v0.35.2
    • k8s.io/apimachinery v0.34.1 -> v0.35.2
  • Updated tests for breaking change in vault/sdk v0.23.0 (#357)

v0.22.5

November 7, 2025

  • Upgrade go version to 1.24.9 for 1.20.x (#345)
  • backport of commit 348b9bf599d39c85c74e7f7ded78511ad653c5ab (#341)
  • backport of commit 6a5e5566019464c0e67d69de996687844b02c8a4 (#338)
  • upgrade go version (#334)
  • Automated dependency upgrades (#333)
  • backport of commit 22beabdde9e785f4e02f4463000180b94d1c7c5f (#331)
  • Add space in warning message for roles requiring audiences. (#312)
  • Log Warning When Kubernetes Role Does not Have an Audience (#301)

v0.23.1

November 5, 2025

  • upgrade go version to 1.25.3 (#340)
  • Automated dependency upgrades (#337)
  • Update path_role.go (#336)
  • Bump actions/setup-go in the github-actions-breaking group (#328)
  • chore: remove changie (#335)
  • Update changelog for v0.23.0 release (#332)

v0.23.0

October 3, 2025

  • change audience warning text since audiences wont be required in Vault 1.21 (#330)
  • Upgrade Go Version (#329)
  • Automated dependency upgrades (#324)
  • ci: Update k8s versions to 1.33-1.29 (#326)
  • init changie (#323)
  • Bump actions/checkout in the github-actions-breaking group (#322)
  • Automated dependency upgrades (#317)
  • Add backport assistant workflow (#320)
  • VAULT-36974: Add backport assistant workflow (#319)
  • [Compliance] - PR Template Changes Required (#318)

0.22.2 (June 17, 2025)

Build

  • Build with go 1.24.4
  • Test with k8s versions 1.28-1.32

Changes

Added warning that roles will require an audience starting in v0.23.0 GH-301.

Dependency updates

  • github.com/hashicorp/vault/api v1.16.0 -> v1.20.0
  • github.com/hashicorp/vault/sdk v0.17.0 -> v0.18.0

0.22.1 (May 30, 2025)

Build

  • Build with go 1.24.3
  • Test with k8s versions 1.28-1.32

Dependency updates

  • github.com/go-jose/go-jose/v4 v4.0.4 -> v4.1.0
  • github.com/hashicorp/cap v0.8.0 -> v0.9.0
  • github.com/hashicorp/vault/sdk v0.15.0 -> v0.17.0
  • k8s.io/api v0.32.1 -> v0.33.1
  • k8s.io/apimachinery v0.32.1 -> v0.33.1

0.21.1 (June 17, 2025)

Build

  • Build with go 1.24.4
  • Test with k8s versions 1.28-1.32

Changes

Added warning that roles will require an audience starting in v0.23.0 GH-301.

Dependency updates

  • github.com/go-jose/go-jose/v4 v4.0.4 -> v4.1.0

0.21.0 (Feb 12, 2025)

Build:

  • Build with go 1.23.6
  • Test with k8s versions 1.27-1.31

Changes

  • github.com/hashicorp/cap v0.7.0 -> v0.8.0
  • github.com/hashicorp/vault/api v1.14.0 -> v1.16.0
  • github.com/hashicorp/vault/sdk v0.13.0 -> v0.15.0
  • k8s.io/api v0.31.0 -> v0.32.1
  • k8s.io/apimachinery v0.31.0 -> v0.32.1
  • github.com/hashicorp/go-sockaddr v1.0.6 -> v1.0.7

0.20.1 (June 17, 2025)

Build

  • Build with go 1.24.4
  • Test with k8s versions 1.28-1.32

Changes

Added warning that roles will require an audience starting in v0.23.0 GH-301.

Dependency updates

  • github.com/go-jose/go-jose/v4 v4.0.4 -> v4.1.0

0.20.0 (Sept 4, 2024)

Build:

  • Build with go 1.22.6
  • Test with k8s versions 1.26-1.30
  • Migrate from gopkg.in/go-jose/go-jose.v2 to github.com/go-jose/go-jose/v4

Dependency updates:

  • github.com/go-test/deep v1.1.0 -> v1.1.1
  • github.com/hashicorp/cap v0.6.0 -> v0.7.0
  • github.com/hashicorp/go-hclog v1.6.2 -> v1.6.3
  • github.com/hashicorp/vault/api v1.12.2 -> v1.14.0
  • github.com/hashicorp/vault/sdk v0.11.1 -> v0.13.0
  • k8s.io/api v0.29.3 -> v0.31.0
  • k8s.io/apimachinery v0.29.3 -> v0.31.0

0.19.0 (May 20, 2024)

Changes

  • Updated gopkg.in/square/go-jose.v2@2.6.0 to gopkg.in/go-jose/go-jose.v2@2.6.3
  • Updated dependencies
    • github.com/docker/docker v24.0.7+incompatible -> v24.0.9+incompatible
    • github.com/go-jose/go-jose/v3 v3.0.1 -> v3.0.3
    • github.com/hashicorp/cap v0.4.1 -> v0.6.0
    • github.com/hashicorp/vault/api v1.11.0 -> v1.12.2
    • github.com/hashicorp/vault/sdk v0.10.2 -> v0.11.1
    • golang.org/x/net v0.22.0 -> v0.23.0
    • k8s.io/api v0.29.1 -> v0.29.3
    • k8s.io/apimachinery v0.29.1 -> v0.29.3

Improvements

  • Allow TLS client to use the host's root CA set when no CA certificates are provided and disable_local_ca_jwt is true if running Vault in a Kubernetes pod. Additionally, validate the configuration's provided CA PEM bundle. GH-238

0.18.0 (Feb 2, 2024)

Changes

  • Build with go 1.21.3
  • Test with k8s versions 1.24-1.28
  • Updated dependencies GH-209 GH-225 GH-230:
    • github.com/docker/docker v24.0.5+incompatible -> v24.0.7+incompatible
    • github.com/go-jose/go-jose/v3 v3.0.0 -> v3.0.1
    • github.com/hashicorp/cap v0.3.4 -> v0.4.1
    • github.com/hashicorp/go-hclog v1.5.0 -> v1.6.2
    • github.com/hashicorp/go-sockaddr v1.0.2 -> v1.0.6
    • github.com/hashicorp/vault/api v1.9.2 -> v1.11.0
    • github.com/hashicorp/vault/sdk v0.9.2 -> v0.10.2
    • golang.org/x/crypto v0.11.0 -> v0.14.0
    • golang.org/x/mod v0.12.0 -> v0.14.0
    • golang.org/x/net v0.13.0 -> v0.19.0
    • golang.org/x/sys v0.10.0 -> v0.13.0
    • golang.org/x/text v0.11.0 -> v0.13.0
    • golang.org/x/tools v0.12.0 -> v0.16.1
    • k8s.io/api v0.28.1 -> v0.29.1
    • k8s.io/apimachinery v0.28.1 -> v0.29.1

Features

  • Use annotations with the prefix vault.hashicorp.com/alias-metadata- from the client token's associated service account as alias metadata for the Vault entity GH-226

Improvements

  • Support bound service account namespace selector GH-218
  • Indicate that token reviewer JWT is set on config read GH-221

0.17.1 (Sept 7, 2023)

Improvements

  • Allow any token type for TokenReviewer validation GH-207

0.17.0 (Aug 31, 2023)

  • update dependencies GH-206
    • github.com/hashicorp/cap v0.3.4
    • github.com/hashicorp/vault/api v1.9.2
    • github.com/hashicorp/vault/sdk v0.9.2
    • k8s.io/api v0.28.1
    • k8s.io/apimachinery v0.28.1

0.16.0 (May 25, 2023)

  • Add display attributes for OpenAPI OperationID's GH-192
  • update dependencies GH-196
    • github.com/hashicorp/cap v0.3.0
    • github.com/hashicorp/vault/api v1.9.1
    • k8s.io/api v0.27.2
    • k8s.io/apimachinery v0.27.2

0.15.1 (March 27, 2023)

Changes

  • enable plugin multiplexing GH-186
  • update dependencies
    • github.com/hashicorp/vault/api v1.9.0
    • github.com/hashicorp/vault/sdk v0.8.1
    • github.com/go-test/deep v1.0.8 -> v1.1.0
    • github.com/hashicorp/go-hclog v1.3.1 -> v1.5.0
    • k8s.io/api v0.25.3 -> v0.26.3
    • k8s.io/apimachinery v0.25.3 -> v0.26.3

0.15.0 (February 9, 2023)

Changes

  • Return HTTP 403 error code instead of 500 when JWT validation fails due to invalid issuer, audiences, or signing algorithm GH-179
  • Checks the Kubernetes API is audience-aware by checking for at least one compatible audience in the response from TokenReviews GH-179
  • Update to Go 1.19 GH-166
  • Update dependencies GH-166: | MODULE | VERSION | NEW VERSION | DIRECT | VALID TIMESTAMPS | |---------------------------------|------------------------------------|-------------|--------|------------------| | github.com/hashicorp/go-hclog | v1.1.0 | v1.3.1 | true | true | | github.com/hashicorp/go-uuid | v1.0.2 | v1.0.3 | true | true | | github.com/hashicorp/go-version | v1.2.0 | v1.6.0 | true | true | | github.com/hashicorp/vault/api | v1.5.0 | v1.8.2 | true | true | | github.com/hashicorp/vault/sdk | v0.5.3 | v0.6.1 | true | true | | k8s.io/api | v0.0.0-20190409092523-d687e77c8ae9 | v0.25.3 | true | true | | k8s.io/apimachinery | v0.22.2 | v0.25.3 | true | true |