minio/kes 2023-11-09T17-35-47Z

Release 2023-11-09T17-35-47Z

on GitHub

Release Notes

Added

• KES provides a development server that requires no config file or keystore. A dev server stores in-memory and does not persist them across restarts. It can be started with a single command:

  $ kes server --dev
  Version     2023-11-09T17-35-47Z    commit=53b74e38697bc68fd88dff7a3cf431db692db9ef
  Runtime     go1.21.4 darwin/arm64   compiler=gc
  License     AGPLv3                  https://www.gnu.org/licenses/agpl-3.0.html
  Copyright   MinIO, Inc.  2015-2023  https://min.io
  
  KMS         In Memory
  API         · https://127.0.0.1:7373
              · https://192.168.188.79:7373
  
  Docs        https://min.io/docs/kes
  
  API Key     kes:v1:ADsGCjJoWziQ82wPUG6oHbqhhlbkajaRGP+3+JSfx5Wq
  Admin       7bbffa635fc160ef8048a344a53aab54e472e5c654c6339a9cec9223301808c7
  Logs        error=stderr level=INFO
              audit=stdout level=INFO
  
  => Server is up and running...
  

• New API for parsing KES config files with the kes/kesconf package. This replaces the kes/edge package.

Changed

• Building docker images using goreleaser requires qemu on the host.
• If offline caching is enabled, the KES server status API does not try to connect to the backend keystore.
  This prevents liveness/readiness probes failures when the backend keystore is offline.

Fixed

• Audit log events are now flushed immediately to clients subscribed to the audit log stream.
• An pattern matching bug in the request path pattern matching that caused authentication errors.
• If the no server address is specified on the command line, the server honor the address provided
  in the config file. If the config file address is also empty, the server defaults to 0.0.0.0:7373.

What's Changed

• drop platform requirment on build stage by @aead in #410
• honor offline caching in /v1/status API by @aead in #412
• update kes-go to v0.2.1 by @aead in #415
• kesconf: expose public API by @aead in #414
• Parse address from config if not provided with '--addr' by @rluetzner in #419
• kes: flush audit log events to clients by @aead in #417
• cmd: server should use default addr if none is specified by @aead in #420

New Contributors

• @rluetzner made their first contribution in #419

Full Changelog: 2023-10-27T22-05-35Z...2023-11-09T17-35-47Z