hashicorp/boundary v0.14.0

on GitHub

0.14.0 (2023/10/10)

Deprecations/Changes

• Per the note in Boundary 0.12.0, the vault credential library subtype has
  now been removed in favor of vault-generic. For example, instead of
  boundary credential-libraries create vault, you must use boundary credential-libraries create vault-generic.
• Per the note in Boundary 0.12.0, errors returned from the cli when using the
  -format=json option will now only use the status_code field. The status
  field has been removed.
• Per the note in Boundary 0.12.0, targets require a default port value. Ports
  defined as part of a host address were ignored but allowed as part of a target
  definition; from 0.14.0 onwards, any port defined on a host address will now
  become an error.
• Targets: Per the note in Boundary 0.10.10, target Application Credentials has
  been renamed to Brokered Credentials. application-credential-source has been
  removed as a field. brokered-credential-source should be used instead.
  (PR, deprecated
  changelog).

New and Improved

• cli: Add support for specifying a command that will be executed on the remote host when
  using the boundary connect ssh subcommand.
  (Issue,
  PR).
• feat: add API support for additional LDAP auth method fields:
  maximum_page_size and dereference_aliases
  (PR).
• feat: add worker upstream connection status to ops health check
  (PR).
• feat: allow HCP cluster id to be sourced from file or env variable
  (PR).
• feat: add support for telemetry events via flag or Boundary configuration
  (requires observation events to be enabled). Deny filter now filters
  coordination worker status from observation events by default. (This behavior
  is overridden by any user specified allow or deny filters)
  (PR).
• ui: Add full UI support for LDAP auth method
  (PR)
• ui: Add new attribute fields to storage bucket to support the assume role service in AWS.
  (PR)

Bug Fixes

• LDAP auth methods: allow bind-dn and bind-password to be updated
  independently. (PR)
• targets: Fix address field not being populated if the number of targets on a
  list returns more than 10000 entries
  (PR)
• cli: Fix issue when using the authenticate command against a password auth
  method on Windows where the password would be swallowed when the login name is
  submitted (PR)
• worker: Fix an issue that could cause intermittent startup issues on slow
  systems (PR)
• cli: Remove websocket max message size. This fixes issues where large message
  sizes are sent to the client from a worker which resulted in the connection
  being terminated, as is the case with an scp download when using an SSH
  Target. (PR)