minio/kes v0.8.0

Version 0.8.0

on GitHub

This release makes some major breaking changes affecting the server configuration and derived data encryption keys.

Changed

• The KES server supports only HTTP/2. Support for HTTP/1.1 and HTTP/1.0 has been removed. (b74bb38)
• The KES SDK stabilizes the API for creating a new client (326d8a4)
• The log configuration does not support log files anymore. Error and Audit logging can only be enabled or disabled (8f259c0)
• The Vault K/V prefix configuration field has been renamed from name to prefix (8f259c0)
• Some KES server CLI options have been renamed from --tls-key to --key, --tls-cert to --cert and --mtls-auth to --auth. (8f259c0)

Removed

• Support for toml configuration files. (8f259c0)
• Support for toml policy files (3cd0009)
• Direct support for encrypted secrets via an external KMS configuration (650af34)
• Support for the insecure AES key derivation based on RFC 8452 (650af34)