banzaicloud/bank-vaults 1.3.0

on GitHub

General:

• Vault 1.4 support works stable (#963)
• improve lint and introduce emperror errors (#989)
• various docs fixes
• prepend namespace name to ClusterRoleBinding for Vault Helm Chart (#993) (@cablespaghetti)

Webhook:

• support the old .dockercfg key from the imagePullSecret as well (#975)
• support cert renewal in bods by using secret projectedVolume instead of subPath mounts (#976)
• fix Kubernetes version comparison (#987) (@martinezleoml)
• vault-env: allow to pass data in write requests (#984)
• OCP 4.3: runAsUser in Vault Secrets webhook chart should be configurable (#995) (@dakine1111)

Operator:

• add vault condition statuses (#972)
• support JSON-formatted Vault policies (#978) (@chrlwrd)

Security:

• Snyk code scanner has been enabled for scanning the whole codebase (#980)

Next Release:

• In Vault 1.4.0 the Raft storage backend has been stabilized, and in tandem, the etcd-operator project has been archived, so we are going to deprecate etcd-operator support (but not etcd support!) and phase it out in later versions, we suggest to use Raft in the first place.