1.5.0

Breaking changes

• The VaultClient() object now has a cache for all of its lifetime:

client = vault_cli.get_client()
old = client.get("a")
time.sleep(1000)
assert old == client.get("a")

If you need a scoped cache, use the client as context manager:

with client:
    old = client.get("a")

• Be consistent whether we crash or not, in vault-cli env (#178)
  In some cases, vault-cli env might still run your program even if it could fetch the secrets.
  New behaviour is:
• vault-cli env will never run your program it it fails while accessing a secret
• vault-cli env --force will always run your program, some environment variables might be missing.

Changelog

• Travis to GH Actions (#179)
• Improve a doc title wording (#172)
• Fix broken markup (#173)
• Typo (#171)
• Hide ssh-add message (#170)
• Add notices around certificates (#169)

Kudos:

@ewjoachim, @jybeepeopledoc and @mgu

1.4.0

• Verbosity can now be controlled through verbose: option in config file
• New option umask: / --umask / VAULT_CLI_UMASK controls permissions of new files (#162)
• Forced dependency pyyaml>=5.3.1 to avoid CVE (#156)
• Silenced ssh-add in vault-cli ssh (#167)

1.3.1

• Fix package description, broken on PyPI (#161)

1.3.0

• Wrote the documentation at https://vault-cli.readthedocs.io/en/latest/ (#90)
• Make the official command-line executable name vault-cli instead of vault.
  vault will continue to work for an undeterminate amount of time, except if
  we receive complaints. (#89)

1.2.0

• vault env now supports - and (spaces) in variable names, changing them into _
• vault env fails properly when program name is not supplied
• vault ssh lets you use SSH without writing the private key on disk
• Fix trailing slash in path issue in get-all and delete-all (#135)
• Omit secrets in vault env when path contains forbidden chars (#138)

1.1.0

• Add --output option to vault get (defaults to stdout)

1.0.0

• Added SystemD documentation (#124)
• Remove the hard-coded "value" key used in get/set (#104)
• Added vault env --omit-single-key flag to help compatibility (#104)
• Added upgrade documentation (#104)
• Enable --flat by default on vault get-all (#130)

0.13.0

• Fix secret whitespace stripping (#110)
• Fix vault get-all and vault env without list permission

0.12.0

• Add Jinja2 'include' support for template command (#116)

0.11.0

• Add support of templates when values are dict