v1.1.0-alpha.0
Pre-release
Pre-release
·
318 commits
to master
since this release
What's Changed
- The agent now reports the annotations and labels of namespaces and secrets. (#581, #582)
- The agent now exposes readiness and liveness probes. (#580)
- In Venafi Cloud Key Pair Service Account mode, you can now omit the
serverfield in the configuration file. It defaults to the URLhttps://api.venafi.cloud. If you are in the european region, you still need to setserver: https://api.venafi.eufield in the configuration file. (#575)
- It is now possible to use the
--periodflag without also giving theperiodfield. (#575) - Helm chart values are now validated to alert you if they contain errors to help you quickly identify typos in fields. (#556)
- The "unauthenticated mode" has been removed as it made it hard to diagnose mismatched authentication flags. For example, using
--venafi-cloudwithout--credentials-file/-kused to not show any error and the Agent would happily start. Now, if you don't provide the right set of authentication flags, the Agent will show a helpful message explaining how the authentication flags can be used. (#575) - The
--helphas been re-written to help understanding how authentication flags interact with each other. (#575) - You can no longer use
--private-key-pathalong with--credentials-path. Previously,--private-key-pathwould be ignored if--credentials-pathwas provided. Now, the two options are mutually exclusive and a helpful message is shown when trying to use both. (#575) - The flag
--private-key-pathnow defaults to the empty string. It previously defaulted to/etc/venafi/agent/key/privatekey.pemand the flag was omitted from the deployment manifest, which was confusing to users trying to understand how this private key was being configured. A helpful message is now shown when trying to run--client-idwithout--private-key-path. (#575) - The field
uploader_idin the configuration file is deprecated. Setting this field will no longer do anything. A warning is now shown when using this field. The reason this field was deprecated is that it was never used by the Venafi Cloud API. Behind the scenes, theuploader_idis arbitrarily set tonoso that the API doesn't complain. (#575) - The binary's size has been reduced from 72 MB down to 55 MB. (#556)
- The Docker image is now built using cert-manager's base image based on apko's alpine image using
ko. As a result, the binary's location in the image is now located at/ko-app/preflightinstead of/bin/preflight. (#556)
Full Changelog: v1.0.0...v1.1.0-alpha.0