Release version 0.22.2

Changelog

• 7fd4bf9 cmd: add support for enclaves
• dd589df gcp: add test for marshaling credentials
• 67f350d keserv: fix region assignment in AWS SecretsManager.

Release version 0.22.1

Changelog

• 6b666c9 all: use human-readable size limits and mem.LimitReader
• 58ac91e cmd: replace mem unit formating
• 4e7b9e5 enclave: fix bug in enclave name query parameter construction
• 63d321b gcp: avoid passing invalid private keys to SDK
• 064cc96 gcp: fix bug when listing keys
• 15ad858 gcp: use gcp secretsmanager module instead of generic gcp go SDK
• 18e9548 http: use human-readable memory limits

Release version 0.22.0

Changelog

• c3dead4 Update README.md
• bf03f68 add support for custom CA certificates
• 865c638 cmd: improve update subcommand
• 16634e0 cmd: reject server certificates without SANs
• 21bd592 implement stateful client-side load balancing
• 57bf351 kes: allow clients to instantiate Enclave
• a0a95c8 keserv: fix GCP secretmanager initialization
• 1767cc2 keserv: fix nil assignment and add tests
• 5f65344 kestest: add metrics test
• 2c25208 kms: fix recursion bug in Error
• 206bb63 new package kms and keserv
• 0d28766 retry when server returns 5xx error codes
• 4963b53 update ubi-minimal image to latest v8.7
• 1d592b7 use golangci-lint action instead of custom download
• db91871 use human readable memory limits
• 87de9e0 vault: use default approle engine

Release version 0.21.1

Changelog

• bd50fca add /v1/enclave/describe API
• 2c4d763 add /v1/key/describe API
• bb1b5ba adding vulncheck github workflow action (#277)
• 5f20d74 all: simplify and remove unused code
• a91227c cache: fix bug in offline caching (#278)

Release version 0.21.0

Changelog

• f66ebce Update README.md
• f8916be add OS and CPU arch to status API (#256)
• 501a090 add govulncheck to CI (#269)
• a468839 add github downloads badge
• 752f186 cmd: add enclave commands
• 2b3a66b cmd: rework server startup message (#255)
• 1fcf3ba init: define policy assignments in init file.
• 6f36f45 kestest: move server to gateway tests
• b0fb876 organize CI actions
• e7821f6 remove unnecessary space and add an example
• a712a6e separate stateful and stateless server implementation
• c456b37 sys: switch to abstract filesystem implementation
• fbca7a7 tls: add support for TLS reverse proxies to stateful server (#254)
• 9eb8a5c update CI/CD from Go1.18 to Go1.19 (#268)
• d73dbff update ubi base container version to 8.6
• cb3aad5 yml: remove KES v0.13.5 and v0.14.0 config migration (#260)

Release version 0.20.0

What's Changed

• cli: refactor metrics and remove github.com/gizak/termui by @aead in #237
• cli: improve kes identity ls command by @aead in #239
• Bump go1.17 to 1.18 by @ktaf in #242
• http: include enclave name in audit log by @aead in #243
• fips: simplify TLS configuration by @aead in #241
• cli: improve kes policy show output by @aead in #238
• cmd: improve kes status by @aead in #244
• cmd: improve listing and output colorization by @aead in #245
• cmd: add kes identity info command by @aead in #246
• add stateful single-node KES implementation by @aead in #240
• improve timer usage by re-using them by @harshavardhana in #249
• metric: add response code as label to status metrics by @aead in #251
• error: add ConnError type for network connection errors by @aead in #252
• build: fix semver release information by @aead in #253
• cmd: add kes policy info command by @aead in #247

New Contributors

• @ktaf made their first contribution in #242

Full Changelog: v0.19.4...v0.20.0

Release version 0.19.4

Changelog

• b25affb Update README.md
• 68a9e36 dep: update gopkg.in/yaml to v3 (#236)
• 6b1d310 fix server help typo
• 827bb42 use build information from runtime/debug

Release version 0.19.3

Changelog

• 884c3bc cmd: display server endpoints listening on correctly (#229)
• 0189dea gcp: add support for custom OAuth2 scopes
• 5c843ae update Go version of CI tests
• fbe6fa7 vault: issue health check before dialing (#231)

Release version 0.19.2

What's Changed

• metric: add CPU and co-routine metric by @aead in #219
• kestest: add server API tests by @aead in #214
• metric: add memory metrics by @aead in #220
• metric: expose usable CPUs by @aead in #221
• dep: update to prometheus v1.11.1 by @aead in #222
• key: switch to binary-encoded DEKs by @aead in #206
• hashicorp: update client SDK to v1.5.0 by @aead in #223
• hashicorp: accept 200 OK and 204 No Content by @aead in #225
• Switch back to go1.17 by @donatello in #226

Full Changelog: v0.19.1...v0.19.2

Release version 0.19.1

Changelog

• a4102e4 ci: update github actions {checkout,go-setup}
• c6fbf42 cmd: align kes key command output (#218)
• 6597316 fix: identation for flags in 'kes log'