spiffe/spire v1.7.1

on GitHub

Added

• x509pop node attestor emits a new selector with the leaf certificate serial number (#4216)
• HTTPS server in the OIDC Discovery Provider can now be configured to use a certificate file (#4190)
• Option to log source information in server and agent logs (#4246)

Changed

• Agent now has an exponential backoff strategy when syncing with the server (#4279)

Fixed

• Regression causing X509 CAs minted by an UpstreamAuthority plugin to be rejected if they have the digitalSignature key usage set (#4352)
• SPIRE Agent cache bug resulting in workloads receiving JWT-SVIDs with incomplete audience set (#4309)
• The spire-server agent show command to properly show the "Can re-attest" attribute (#4288)