Skip to content

Release 2023-10-24T20-26-51Z
Compare
Choose a tag to compare
@minio-trusted minio-trusted released this 25 Oct 01:07
· 44 commits to master since this release
2023-10-24T20-26-51Z
b2443e0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Release Notes

Added

  • Support for encrypting keys stored on the Hashicorp K/V secret engine with transit engine.
    Vault always encrypts its K/V entries with encryption keys managed internally by Vault. Now, users can specify a transit key,
    that KES uses to encrypt K/V values before sending them to Vault. This gives users control over which key is used to encrypt
    the keys generated and stored by KES (on Vault). Ref: server-config.yaml#L243

Changed

  • The Go version has been updated to Go 1.21.3.
  • KES internals have been refactored. Among other things KES now uses structured logging. Refer #403 to for details.

What's Changed

  • update Go from 1.21.1 to 1.21.3 and go mod dep by @aead in #402
  • vault: add support for transit-encrypted K/V by @aead in #404
  • refactor KES API and internals by @aead in #403
  • cmd: fix regression on server address handling by @aead in #405

Full Changelog: 2023-10-03T00-48-37Z...2023-10-24T20-26-51Z

Contributors

aead
Assets 34