minio/kes 2023-07-26T11-13-07Z

Release 2023-07-26T11-13-07Z

on GitHub

Release Notes

KES releases now use Go 1.20.6 and container images are based on UBI 8.8.

New Features

The KES edge server now supports Entrust KeyControl (v10.1 or newer) as key store backend. Refer to the documented edge config file for configuration options.

The KES edge server now uses a new read-optimized caching implementation that improves lock contention.
The details can be found here: 0b32a5d

Bug Fixes

KES accepts either a path or the raw JWT for its Hashicorp Vault K8S JWT config field. Hence, it has to check if the value refers to a file or not. Commit f4e3ef6 disallows the OS path separator character in the Hashicorp Vault K8S JWT and prevents situations where KES fails to read the JWT with and error like filename is too long.

What's Changed

• update CI and release config to Go 1.20.4 by @aead in #360
• keystore: improve caching mechanism by @aead in #358
• remove package kms and keserv by @aead in #359
• edge: handle Vault K8S auht JWTs more strictly by @aead in #365
• Added unit tests for various key stores by @shtripat in #363
• Enabled for other backend stores by @shtripat in #364
• edge: move tests from edge_test to edge package by @aead in #367
• Refactored kestest integration tests by @shtripat in #368
• fix: kes update command, update it to use proper version tags by @harshavardhana in #374
• fix obsolete vault kubernetes jwt file read by @lu1as in #371
• build(deps): bump google.golang.org/grpc from 1.50.1 to 1.53.0 by @dependabot in #377
• Fix wrong assignment by @reivaj05 in #375
• kestest: randomize key names by @shtripat in #370
• edge: use random secret key names and delete at end of each test by @shtripat in #369
• update kes UBI image to 8.8 by @harshavardhana in #378
• Added github actions for edge test for cloud KMS systems by @shtripat in #379
• ci: update to Go 1.20.6 by @aead in #381
• ci: use correct runner label for edge tests by @shtripat in #380
• ci: delete all the keys post test by @shtripat in #382
• keystore: add support for Entrust KeyControl by @aead in #384

New Contributors

• @shtripat made their first contribution in #363
• @lu1as made their first contribution in #371
• @reivaj05 made their first contribution in #375

Full Changelog: 2023-05-02T22-48-10Z...2023-07-26T11-13-07Z