Version 0.13.0

Changelog

1733747 Add Dockerfile with Red Hat UBI
6a29799 Remove alpine base image and use UBI as default
2be036d add goreleaser dist/ to .gitignore
292db6d add new server API for listing keys
ea8d479 aws: fix incorrect listing behavior
ee275fb ci: update golang-ci version (1.20 -> 1.33)
6f05ade cli: add kes tool migrate command
2820eab config: allow most config fields be replaced with env. vars
63074f4 fs: do not return an error if delete succeeds
7c110c9 refactor the logging infrastructure
5b86974 replace os.Is{...} error checks with errors.Is(err, ...)
d85a727 vault: add support for kubernetes authentication method

Docker images

• docker pull minio/kes:v0.13.0
• docker pull minio/kes:latest

Version 0.12.1

Changelog

6f86551 adjust CLI to be more like modern unix commands
37f8efc reject unknown fields in the yaml config file

Docker images

• docker pull minio/kes:v0.12.1
• docker pull minio/kes:latest

Version 0.12.0

Changelog

b6c9678 add server metrics API
a75c6ec cli: rework audit log trace and add error log trace
a206149 feat: add gcp secret manager support
a918c44 fix docker file for edge image
bc67cf9 fix the docker CI build by adding Dockerfile.release
0ada76e fix: misspelling words and remove tailing space
477b32b remove legacy docker image
8de99b0 sdk: fix incorrect policy name concatenation
945afb7 stabilize client API and improve endpoint URL generation
558854a update Go versions in CI and README

Docker images

• docker pull minio/kes:v0.12.0
• docker pull minio/kes:latest

Version 0.11.0

Changelog

859e6e9 add integration tests
1bd93ff aws: unify errors returned to client
b0826ba fix build version in goreleaser
29c602b fix docker build issues, add ca-certificates for containers
1b64284 gemalto: add support for Gemalto KeySecure
47a2ff0 server: add server startup message
b8727d4 update to v0.11.0
4a60cd5 vault: unify errors returned to client

Docker images

• docker pull minio/kes:v0.11.0
• docker pull minio/kes:latest

Version 0.10.1

Changelog

2eb33a9 Update README.md
c5c1d49 client: use io.LimitReader instead of io.CopyN for raw error messages
bb67968 delete assigned identities when deleting policy
378d417 fix main instead of dir
324a9bc read minisign passphrase from a file

Docker images

• docker pull minio/kes:v0.10.1
• docker pull minio/kes:latest

Version 0.10.0

Added

• New /v1/key/encrypt server API (5de0d19)
• Code of Conduct (6f6ae7c)
• CodeQL static analysis

Fixed

• Custom Vault K/V and AppRole authentication engine paths can be specified (9a6264c)
• Certificate validation for TLS proxies enabled by default (d583669)

Version 0.9.0

Changed

• The CLI client expects the private key now as KES_CLIENT_KEY and the certificate as
  KES_CLIENT_CERT env. variable (c3a1a11)

Version 0.8.3

Changed

• The KES client (including the CLI) now retries when a request fails due to an error that is considered temporary (75b5932)
• An identity in the yaml config can now be replaced by a env. variable. Therefore, an identity as to be a placeholder for an env. variable - e.g. ${MY_IDENTITY} (a7cc78e)

Version 0.8.2

Added

• Private key and certificate for root identity of play instance (c325864)

Changed

• Require HTTP/2 for all server APIs (6e7a319)

Version 0.8.1

Changed

• Removed the restriction of only supporting HTTP/2 (43d9d58)