BREAKING CHANGES:
IMPROVEMENTS:
- Add new, optional, field
bypass_artifactory_tls_verification
toconfig/admin
path. This allows bypassing TLS connection verification with Artifactory instance. PR: #100
IMPROVEMENTS:
- Update release process to publish the binaries directly (without zipping). The checksums file now contain checksums for the binaries (vs the zip file). Issue: #81 PR: #99
IMPROVEMENTS:
- Add support for optional
username
anddescription
to token rotation. PR: #85
BUG FIXES:
- Fix premature export of
JFROG_ACCESS_TOKEN
env var in makefile. PR: #77 - Fix parsing of admin usernames with
/
. PR: #78 - Additional makefile fixes. PR: #79
IMPROVEMENTS:
- Add version suffix for development build (
-dev+<git short hash>
). PR: #74 - Update Vault API module to 1.9.1. PR: #75
IMPROVEMENTS:
- Fix empty strings for optional attributes when reading roles. PR: #66
- Fix inconsistent use of env vars for acceptance tests. PR: #71
IMPROVEMENTS:
- Upgrade dependencies to latest version.
- Update Go minimum version to 1.18 (which we have been using for a while now).
PR: #65
IMPROVEMENTS:
- Sign release checksums file with GPG key. Release also include public key for signature verification.
PR: #54
IMPROVEMENTS:
- Plugin now reports its version to Vault server. You can see it with
vault plugin list
command. - Remove version number from the binary file name (now
artifactory-secrets-plugin
, vsartifactory-secrets-plugin_v0.2.6
) now that it registers as 'versioned' plugin with Vault server. - Update README on how to register plugin to reflect this change of binary name.
- Update Makefile to use GoRelease (same as GitHub Action) to build binary for development process.
PR: #53
IMPROVEMENTS:
- Switch to using POSTing JSON (instead of form) when creating token.
expires_in
andforce_revocable
fields are now opt-in.
BUG FIXES:
IMPROVEMENTS:
- Add support for Vault Username Templating.
- Improve README.md
- Update Vault API and SDK packages to latest version.
PR: #47
IMPROVEMENTS:
- Add support for
force_revocable
flag available in Artifactory 7.50.3+. PR: #45
BUG FIXES:
- Fix revoke token error check only for HTTP status code 200. Now it errors only for status code >= 400. Also include token ID in logs and error message. PR: #41
IMPROVEMENTS:
- Include additional token information when reading from config. PR: #39
IMPROVEMENTS:
- Use username from current token for new token during rotation. PR: #34
- Add env vars to make command
make setup
works. PR: #37
IMPROVEMENTS:
- Update
golang.org/x/net
andgolang.org/x/crypto
modules to latest version. PR: #32 Dependabot alerts: 1, 2, 3, 4
BUG FIXES:
- Fix breakage introduced in 0.2.0 where default port fallback was incorrectly handled. PR: #29
BUG FIXES:
- Fix HTTP response body not closed before root certificate error is returned. PR: #28
BUG FIXES:
- Fix HTTP response body not closed, thus leading to memory leak. PR: #26
IMPROVEMENTS: