Changelog
Changed
- Update k8s authenticator client version to 0.19.1, which streamlines the parsing of authentication responses, updates the project Golang version to v1.15, and improves error messaging.
Fixed
- Secretless now sends a valid "SSL is not supported" response per the PostgreSQL protocol standard when a client attempts to open an SSL connection (i.e. when configured with SSL mode
require
orprefer
) via the PostgreSQL connector. When the client is configured with SSL modeprefer
, the updated response enables the client to downgrade to an insecure connection and continue. Previously, clients sending requests using eitherrequire
orprefer
SSL mode would receive a generic error from Secretless, which made it harder to determine the root cause of the problem and broke howprefer
is expected to work.
cyberark/secretless-broker#1377