hashicorp/vault-k8s v1.3.0

on GitHub

1.3.0 (August 16, 2023)

Improvements:

• Add NAMESPACE, HOST_IP, and POD_IP environment variables to Agent container using downward API GH-486

Changes:

• Templated secrets no longer require the -secret annotation GH-505
• Only inject Pods that are Pending GH-501
• Default to Vault 1.14.1
• Building with Go 1.20.7
• Testing with K8s versions 1.23-1.27
• Dependency updates:
  • github.com/cenkalti/backoff/v4 v4.2.0 -> v4.2.1
  • github.com/hashicorp/vault/sdk v0.8.1 -> v0.9.2
  • github.com/stretchr/testify v1.8.2 -> v1.8.4
  • github.com/prometheus/client_golang v1.14.0 -> v1.16.0
  • k8s.io/apimachinery v0.26.3 -> v0.27.4
  • k8s.io/api v0.26.3 -> v0.27.4
  • k8s.io/client-go v0.26.3 -> v0.27.4
  • golang.org/x/net v0.7.0 -> v0.13.0
  • golang.org/x/sys v0.5.0 -> v0.10.0
  • golang.org/x/term v0.5.0 -> v0.10.0
  • golang.org/x/text v0.7.0 -> v0.11.0
  • Docker alpine version 3.17.3 -> 3.18.3
  • Docker UBI image ubi8/ubi-minimal 8.7-1107 -> 8.8-1037

Bugs:

• Prevent auth-config-token-path from being overridden when another serviceaccount volume is present GH-457