Release version 0.19.0

Changelog

• e1b2193 CI: remove golang-ci issue excludes (#207)
• 0ab614d Update README.md
• cf8db95 add /v1/identity/self/describe API
• c99624b add bulk decryption API /v1/key/bulk/decrypt (#210)
• 4983c75 add client-side functionality to detect server APIs
• 696f43d cmd: fix identity command indentation
• 21555fa http: fix /v1/policy/assign API
• 789e1b5 http: restructure API handlers
• 4453475 implement io.WriterTo for iterators
• 54044b7 improve TLS private key / certificate parsing
• 043a116 log: print audit events on a single line
• 4e21298 support +build build tag comments (#215)
• ce5eee7 support go.mod go1.16

Release version 0.18.0

Changelog

• db186c2 adjust exported error messages
• 479bf34 cli: add support for encrypted private keys
• edeadf3 client: add Enclave type
• da7f9a8 include client IP address in audit log
• 7457bf3 kes: add Status API to client SDK
• 90a133d kestest: add new API tests
• 4073c5f key: remove Manager and export Cache
• e451721 move policy assignment to v1/policy API
• f5171cf remove HTTP trailers from v1/identity/list API
• 4a504d8 remove HTTP trailers from v1/identity/list API
• 74cf93c remove HTTP trailers from v1/key/list API
• 2d746fc remove support for go1.16, enable gofumpt
• 8a93db9 rename /v1/identity/forget API to /v1/identity/delete
• 5d0a857 simplify error and audit log API
• 1bc46ac sys: add minimal multi-tenancy support via Enclaves (#183)
• 816d343 update container base-image ubi-8.5
• 53fd3b7 use iterator pattern for policy API

Release version 0.17.6

Changelog

• 2629439 yml: fix regression parsing policy definitions

Release version 0.17.5

Changelog

• 5a52d51 vault: include K/V prefix when cloning config

Release version 0.17.4

Changelog

• 32f71e1 update dependencies

Release version 0.17.3

Changelog

f9be064 azure: add support for Azure managed identities
0e12ce4 cache: add offline caching of keys
0a52a99 cli: use correct policy name instead of command name
a229d68 config: restructure server initialization and configuration
79aa750 config: update server-config.yaml
abb4c3b fix printed admin identity on startup
f874de8 http: add tests for reading TLS private keys
2c76d12 status: expose backend KMS status
6634a0b testing: new package kestest

Docker images

• docker pull minio/kes:v0.17.3
• docker pull quay.io/minio/kes:v0.17.3

Release version 0.17.2

Changelog

6bdc0ff config: rename root identity (#160)
6c5eb7d tls: add support for encrypted private keys. (#161)

Docker images

• docker pull minio/kes:v0.17.2
• docker pull quay.io/minio/kes:v0.17.2

Release version 0.17.1

Changelog

23fcae9 vault: adjust key creation/deletion to Vault API (#159)

Docker images

• docker pull minio/kes:v0.17.1
• docker pull quay.io/minio/kes:v0.17.1

Release version 0.17.0

Changelog

f9fada6 Create SECURITY.md
507af83 Update SECURITY.md
780fcb7 auth: filter CA certificates when mapping client certificate to policy (#150)
960323f cache: if no cache expiry is provided, set default expiry (#146)
e9e907e fix error message (#158)
4c435cf fortanix: add support for Fortanix SDKMS
576e761 http: simplify request timeout handling (#154)
b0092c5 key: refactor key store backend API (#147)
283e933 metric: fix invalid type check for http.Flusher (#156)
b0819b6 metrics: improve CLI metrics UI
d182174 rename use_buildx -> use: buildx
c41c133 update prometheus dependency (#148)
c4379ce vault: ensure that a write to Vault actually succeeded (#144)

Docker images

• docker pull minio/kes:v0.17.0
• docker pull quay.io/minio/kes:v0.17.0

Release version 0.16.1

Changelog

ed28e20 api: new status API
d51a099 http: fix type conversion in timeout handler (#142)

Docker images

• docker pull minio/kes:v0.16.1
• docker pull quay.io/minio/kes:v0.16.1
• docker pull minio/kes:latest