hashicorp/vault-secrets-operator v0.7.0

on GitHub

0.7.0 (May 27th, 2024)

Important: this release contains CRD schema changes that must be applied manually when deploying VSO with Helm.
Please see updating-crds for more details.

Behavioral changes:

• Core: Controller logs are now JSON encoded by default.
• Core: Secret source errors are now retried using an exponential backoff strategy. Previously the backoff was a constant duration with some added jitter.

Features:

• Core: support argo.Rollout as a rolloutRestartTarget for all secret type custom resources: GH-702
• Helm: add support for cluster role aggregates: GH-752
• Helm: adds values for setting VSO logging options: GH-778
• Helm: add support for configuring strategy on controller deployment : GH-709

Improvements:

• CachingClientFactory: lock by client cache key: GH-716
• Transformations: add support for the htpasswd Sprig function: GH-708
• VPS: skip overwriting tls.crt and tls.key whenever transformation templates are configured: GH-659
• Core: Use exponential backoff on secret source errors: GH-732

Fix:

• Core: call VDS callbacks on VaultAuth and VaultConnection changes: GH-739
• Core: skip LifetimeWatcher validation for non-renewable auth tokens: GH-722
• Core: disable development logger mode by default: GH-751
• VSS: that spec.hmacSecretData's value is honoured: GH-753
• VDS: Selectively log calls to SyncRegistry.Delete(): GH-718

Build:

• CI: test against vault-1.16.2: GH-715
• Bump GH actions for node 16 obsolescence: GH-738

Dependency Updates:

• Bump TF provider versions: GH-737
• Bump github.com/go-logr/logr from 1.4.1 to 1.4.2: GH-775
• Bump github.com/hashicorp/go-getter from 1.7.1 to 1.7.4: GH-711
• Bump github.com/hashicorp/vault/api from 1.12.2 to 1.13.0: GH-725
• Bump github.com/hashicorp/vault/sdk from 0.12.0 to 0.13.0: GH-773
• Bump github.com/onsi/gomega from 1.33.0 to 1.33.1: GH-727
• Bump github.com/prometheus/client_golang from 1.19.0 to 1.19.1: GH-741
• Bump golang.org/x/crypto from 0.22.0 to 0.23.0: GH-744
• Bump google.golang.org/api from 0.176.1 to 0.177.0: GH-724
• Bump google.golang.org/api from 0.180.0 to 0.181.0: GH-758
• Bump k8s.io/api from 0.30.0 to 0.30.1: GH-761
• Bump k8s.io/client-go from 0.30.0 to 0.30.1: GH-760
• Bump sigs.k8s.io/controller-runtime from 0.18.2 to 0.18.3: GH-772
• Bump ubi9/ubi-micro from 9.3-15 to 9.4-6: GH-719
• Bump ubi9/ubi-minimal from 9.4-949 to 9.4-949.1714662671: GH-728