hashicorp/terraform-provider-vault v3.20.1

on GitHub

3.20.1 (Sep 13, 2023)

IMPROVEMENTS:

• Update dependencies (#1958)
  • github.com/hashicorp/go-secure-stdlib/awsutil v0.1.6 -> v0.2.3

BUGS:

• Update k8s-auth config to support unsetting the K8s CA Cert: (#2005)

CHANGES:

• vault_kubernetes_auth_backend_config: prior to vault-1.9.3, the k8s-auth engine would store the K8S CA cert in its configuration if Vault was running in K8s. Post vault-1.9.3, this behaviour was changed to no longer store the K8s CA cert in config. That change confuses TFVP since the kubernetes_ca_cert field can no longer be computed. This fix detects and remedies the issue by adding the ability to "unset" the CA cert in the case where we are provisioning vault-1.9.3+. It should also clean up any K8s CA cert that was left behind after upgrading from any Vault version prior to 1.9.3 with disable_local_ca_jwt=false and kubernetes_ca_cert is either unset or set to "".