Skip to content

Releases: GoogleCloudPlatform/berglas

v0.6.1

20 Sep 23:36
Compare
Choose a tag to compare

What's Changed

  • Implemented option for custom SM locations by @MartijnNPO in #165
  • Bump puma from 3.12.6 to 4.3.8 in /examples/cloudrun/ruby by @dependabot in #166
  • Bump Go to 1.17
  • Updated all dependencies

New Contributors

Full Changelog: v0.6.0...v0.6.1

v0.6.0

08 Jun 17:03
Compare
Choose a tag to compare

Breaking

  • repo: rename "master" branch to "main"
  • core: require Go 1.16+

Changed

  • core: updated all dependencies to their latest versions
  • core: preserve file extension when using a tempfile
  • core: truncate an existing file before writing
  • core: stop receiving signals when terminating
  • docs: document Certificate Authority (CA requirements
  • docs: add Secret Manager example to AppEngine
  • k8s: updated example to use Go 1.13
  • k8s: updated example to use cloud-platform scope (required for Secret Manager)
  • k8s: added --allow-unauthenticated command to documentation

v0.5.0

16 Dec 20:02
Compare
Choose a tag to compare

Breaking

  • core: drop ResolveValue since it is no longer needed

Added

  • core: support for Secret Manager
  • cli: migrate command migrates Berglas secrets to Secret Manager

v0.4.0

05 Dec 23:29
Compare
Choose a tag to compare

Breaking

  • core: drop runtime environment lookup and associated API methods (see #87 for
    details)

Changed

  • core: do not attempt to chmod on windows and plan9
  • docs: various updates for products that have gone GA

v0.3.0

14 Nov 01:58
Compare
Choose a tag to compare

Breaking

  • cli: remove local command short flags, use long-form flags instead, short
    flags will be reserved for global flags moving forward

Added

  • core: add structured logging support (cli default is "text" and sdk default is
    "json")
  • core: DetectRuntimeEnvironment is now available on the client too
  • cli: add --log-format and --log-level flags for controlling output

Changed

  • core: fix nil pointer when finalizing object writes

v0.2.1

14 Nov 01:58
Compare
Choose a tag to compare

Changed

  • core: resolve value uses the passed value instead of looking it up from the
    environment
  • core: retry when setting GCS IAM permissions
  • core: retry when setting KMS IAM permissions
  • core: allow accessing a specific version of a secret

v0.2.0

01 Aug 21:13
Compare
Choose a tag to compare

Breaking

  • cli: drop version command in favor of --version flag
  • core: create will now return an error against an existing secret - use update
    instead

Added

  • core: add new Read API for returning the plaintext secret and metadata about
    the storage object
  • core: retry certain IAM functions due to eventual consistency
  • cli: edit command for editing a secret in a local editor
  • cli: update command for updating an existing secret

Changed

  • auto: [security] do not trust the environment variables
  • cli: list command now outputs in a table with version and timestamp
  • cli: standardized exit codes - see README for more information
  • core: delete all storage versions when deleting a secret

v0.1.4: GAE Support (#44)

01 Aug 21:12
34e256e
Compare
Choose a tag to compare

Breaking

  • core: create now returns a respobse struct
  • core: list returns a struct with a list member instead of a raw list

Added

  • core: support multiple secret versions through GCS generation
  • core: support for Google App Engine (GAE) flex and standard environments

v0.1.3

19 Jun 01:40
eb2153f
Compare
Choose a tag to compare

Changed

  • cli: also allow berlgas:// prefixes
  • core: properly convert to seconds for KMS rotation period during bootstrap
  • core: support multiple containers being returned from the v1alpha API
  • doc: update to match auto-generated KMS keyring