Skip to content

Latest commit

 

History

History
353 lines (292 loc) · 19.1 KB

CHANGELOG.md

File metadata and controls

353 lines (292 loc) · 19.1 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Changed

  • Nothing should go in this section, please add to the latest unreleased version (and update the corresponding date), or add a new version.

0.26.3 - 2024-07-26

Changed

  • Upgrade Go version (CNJR-4651)
  • Update version number

0.26.2 - 2024-04-10

Changed

  • Upgrade Go to 1.22 (CONJSE-1842)

0.26.1 - 2023-12-28

Security

  • Increase length of signing key used for mTLS authentication to 4096 bits. (CONJSE-1819)

0.26.0 - 2023-07-18

Security

Added

  • Log level is now configurable using the LOG_LEVEL environment variable or conjur.org/log-level annotation. The existing DEBUG environment variable and conjur.org/debug-logging annotation is deprecated and will be removed in a future update. cyberark/conjur-authn-k8s-client#522

Fixed

0.25.1 - 2023-06-12

Security

0.25.0 - 2023-03-17

Removed

Changed

0.24.0 - 2022-11-23

Changed

0.23.8 - 2022-08-31

Changed

0.23.7 - 2022-07-12

Changed

  • Updated dev/Dockerfile.debug and removed bin/test-workflow/test-app-summon/Dockerfile.builder and bin/test-workflow/test-app-summon/Dockerfile.oc cyberark/conjur-authn-k8s-client#480

0.23.6 - 2022-06-16

Security

0.23.5 - 2022-06-14

Changed

Security

0.23.3 - 2022-05-19

Security

0.23.2 - 2022-03-23

Changed

0.23.1 - 2022-02-11

Added

Changed

Fixed

  • Fixes bug in Namespace Prep Helm chart's conjur_connect_configmap.yaml, which silently accepted missing values from the referenced Golden ConfigMap. cyberark/conjur-authn-k8s-client#447

0.23.0 - 2022-01-14

Added

Changed

Fixed

0.22.0 - 2021-09-17

Added

  • Introduces the conjur-config-cluster-prep.yaml and conjur-config-namespace-prep.yaml raw Kubernetes manifests generated from their corresponding Helm charts. These manifests provide an alternative method of configuring a Kubernetes cluster for the deployment of Conjur-authenticated applications for users unable to use Helm in their environment. cyberark/conjur-authn-k8s-client#338
  • Added user-configurable Helm values for the names of resources created by the conjur-config-namespace-prep Helm chart cyberark/conjur-authn-k8s-client#383

Security

0.21.0 - 2021-06-25

Added

0.20.0 - 2021-06-16

Fixed

  • Fixes bug in error handling within the VerifyFileExists method that resulted in a panic when the error from os.Stat was not ErrNotExist. The fix includes introducing the CAKC058 error and log message for a file permissions error and theCAKC059 error and log message for when the path to a file exists but is not a regular file. cyberark/conjur-authn-k8s-client#252

Changed

0.19.1 - 2021-02-08

Changed

  • The Authenticate method now parses the authentication response and writes it to the token file, without the need to call ParseAuthenticationResponse. This is a breaking change for software that leverages the github.com/cyberark/conjur-authn-k8s-client/pkg/authenticator Go package (e.g. Secretless and Secrets Provider for Kubernetes); users of the Authn-K8s client Docker image are not impacted by this change. cyberark/conjur-authn-k8s-client#180
  • The project Golang version is updated from the end-of-life v1.12 to the latest version v1.15. cyberark/conjur-authn-k8s-client#206
  • The error message raised when the username doesn't include the host/ prefix now suggests that the user check this. Previously the error message did not include any information about what was wrong with the username. PR cyberark/conjur-authn-k8s-client#212

Added

  • Support for OpenShift 4.6 was certified as of this release.
  • Support for OpenShift 4.7 was certified as of this release.

0.19.0 - 2020-10-08

Added

Changed

0.18.1 - 2020-09-13

Fixed

Changed

0.18.0 - 2020-04-21

Added

Changed

0.17.0 - 2020-04-07

Added

  • Authenticator client prints its version upon startup (#93)

0.16.1 - 2020-02-18

Fixed

  • Only publish to DockerHub / RH registry when there is a new version (#72, #74, #79, #83)

Changed

  • Clean up implementation of default CONJUR_VERSION and add unit tests (#80)

Added

  • Added pipeline step to validate CHANGELOG format and update CHANGELOG to meet keepachangelog standard (#82)

0.16.0 - 2020-01-21

Changed

  • Enable authenticating hosts that have their application identity defined in annotations instead of in the id. Hosts that have their application identity in the id can be authenticated as well.

0.15.0 - 2019-11-26

Changed

  • Enable authenticating hosts that are defined anywhere in the policy tree, instead of only hosts that are defined under conjur/authn-k8s/<service-id>/apps.

0.14.0 - 2019-09-04

Added

  • Added a log package with a centralized file for log messages
  • Added a constructor for Authenticator that receives an AccessToken

Changed

  • Moved all AccessToken related work to a separate package
  • Moved all log related work to the log package
  • NewFromEnv signature has changed - method does not take input parameters anymore and is using default values for tokenFilePath & clientCertPath. These parameters can also be set as environment variables:
    • tokenFilePath can be set with CONJUR_AUTHN_TOKEN_FILE
    • clientCertPath can be set with CONJUR_CLIENT_CERT_PATH

0.13.0 - 2019-03-08

Fixed

  • Fixed issues with certificate expiration not being handled properly

Added

  • Added ability to specify token timeout with CONJUR_TOKEN_TIMEOUT variable

Changed

  • Modules have been reorganized to DRY out the main runner module

0.12.0 - 0000-00-00

Changed

  • Reorganized file structure of project to make importable

0.11.1 - 0000-00-00

Fixed

  • Fixed bug with request body during v4 authentication.

0.11.0 - 0000-00-00

Added

  • Added support for Conjur v5.
  • Added CONJUR_VERSION env variable ('4' or '5', defaults to '5').

0.10.2 - 0000-00-00

Added

  • Added a RedHat-certified version of the image.

0.10.1 - 0000-00-00

Fixed

  • Fix an issue where sidecar fails when not run as root user.