CHANGELOG.rst

Changelog

4.2.3 (2019-11-21)

• Provide logged alternate data for write to get returned data. [Terry Howe]
• Added new return var to auth mount. [DrMagPie]
• Added var to defirentiate new and updated engines. [DrMagPie]
• Enable OIDC auth and role in namespaces. [Lynn Dong]

4.2.2 (2019-10-29)

• Fix auth method. [Drew Mullen]

4.2.1 (2019-10-24)

• Add OIDC auth role and functional test. [Lynn Dong]
• Check mode param for auth method, clarify error. [Drew Mullen]
• Fix idemp for namespaces. [Drew Mullen]
• Updates to fix check mode regarding namespaces. [Drew Mullen]
• Pass check mode if no namespace. [Drew Mullen]

4.2.0 (2019-10-22)

• Deprecate hashivault_policy_set_from_file. [Terry Howe]
• Add OIDC auth method config module. [Lynn Dong]
• Altered hashivault_list.py to use the hvac list_secrets method. [Jason Neurohr]
• Fix db idempotency check. [Drew Mullen]
• Rename deprecated modules. [Terry Howe]
• Update examples to avoid deprecated modules. [Drew Mullen]
• Tune and disable should use secret_engine instead. [Drew Mullen]
• Deprecate tuning module. [Drew Mullen]
• Cast options[version] to string for idempotence check. [Drew Mullen]
• Fix some cases where casting raise exception. [Damien Goldenberg]

4.1.0 (2019-08-30)

• Version 4.1.0. [Terry Howe]

• Provide module to manage namespaces (ent only) [Drew Mullen]

  clean up comments

• Approle can accept params in a file with role_file. [Drew Mullen]

4.0.0 (2019-08-14)

• Deprecate create and delete approle modules. [Terry Howe]
• Add check_mode support for approle. [Terry Howe]
• Approle secret mount point support. [Terry Howe]
• Add proper approle modules. [Terry Howe]
• Added hashivault_ldap_group module. [Jason Neurohr]
• Make aws role create idempotent. [Terry Howe]
• Db engine config plugin can be used for all db plugins. [Damien Goldenberg]
• Added support for custom mount points. [DrMagPie]

3.18.2 (2019-08-06)

• Fix the compatibility of the db role module with python 2.7. [Damien Goldenberg]

3.18.1 (2019-07-24)

• Set no_log for some values. [Terry Howe]
• Fix some documentation typos. [Terry Howe]
• Fix the doc and upload script. [Terry Howe]

3.18.0 (2019-07-24)

• Added hashivault_auth_ldap and hashivault_identity_group [Jason Neurohr]
• Updated hashivault_auth_list.py to return False for changed. [Jason Neurohr]
• Fix some pep warnings and docs issues. [Terry Howe]
• Fix various idempotence checks. [Drew Mullen]
• Secret eng mgmt. [Drew Mullen]

3.17.7 (2019-05-31)

• Deprecate hashivault_auth_enable. [Terry Howe]
• Add new hashivault_auth_method module. [Drew Mullen]
• Add new hashivault_azure_auth_role module. [Drew Mullen]
• Add new hashivault_azure_auth_config module. [Drew Mullen]

3.17.6 (2019-05-23)

• Azure configuration support. [Drew Mullen]
• Allow required_if, etc to be passed. [Drew Mullen]
• Make twine happy. [Terry Howe]

3.17.5 (2019-05-16)

• Allow to create custom approle secret id. [Wojciech Podgorski]

3.17.4 (2019-04-25)

• Fix kv2 secret write. [Vincent Mazenod]

3.17.3 (2019-04-11)

• Add mount_point option to the lookup plugin. [Piotr Śliwka]

3.17.2 (2019-04-11)

• Add the support for the http method and return json in case of GET method. [Damien Goldenberg]

3.17.1 (2019-04-05)

• Support metadata for v1 reads. [Terry Howe]
• Convert to use twine. [Terry Howe]

3.17.0 (2019-04-05)

• Add read metadata. [Terry Howe]
• Add functional tests. [Terry Howe]
• Add a module to fetch cluster health information. [Damien Goldenberg]
• Add a module to fetch leader information cluster. [Damien Goldenberg]
• Enable secret keystore. [Terry Howe]
• Add pep8 to tox.ini. [Terry Howe]
• Pep8 compliance. [Terry Howe]
• Start getting pep8 support. [Terry Howe]
• Clean up some warnings that are causing issues. [Terry Howe]

3.16.3 (2019-03-26)

• Fix approle auth for hvac kv2 engine. [Nathan K]

3.16.2 (2019-03-02)

• Add arguments to init. [Terry Howe]

3.16.1 (2019-02-27)

• Add support for passing mount_point to hashivault_userpass. [Stanislav Yotov]

3.16.0 (2019-02-05)

• Ansible galaxy support. [Maxime Brunet]

3.15.1 (2019-02-05)

• Have write return data. [Terry Howe]
• Clean up imports. [Terry Howe]
• Get rid of inventory warnings. [Terry Howe]
• Add document metadata. [Terry Howe]

3.15.0 (2019-01-31)

• Add tests for hashivault_userpass. [Terry Howe]
• Userpass user management module. [p0tr3c]

3.14.0 (2019-01-31)

• Add tests for root token generation. [Terry Howe]
• Add support to generate root token & revoke tokens. [Bharath Channakeshava]

3.13.0 (2019-01-31)

• kv2 secret read, write and delete with hvac kv2 client. [Terry Howe]
• Remove verbose call of playbook. [drewmullen]
• Initial kv2 support [rmullen]
• Identity entity tests. [Terry Howe]
• Fix entity update, will not overwrite with default on update. [p0tr3c]
• Fix unordered list comparison for policies. [p0tr3c]
• Add identity management module. [p0tr3c]
• Support for entity aliases. [p0tr3c]
• Make global env travis. [Terry Howe]

3.12.1 (2019-01-24)

• Add pipeline job to build Ansible webdocs and publish to Github pages, Fix YAML. [Samy Coenen]

3.12.0 (2019-01-06)

• Optionally include namespace as play parameter or environment var. [rmullen]

3.11.0 (2018-12-17)

• Add tests for revoke and renew token. [Terry Howe]
• Added token renew and token revoke functions. [Charles Bevan]

3.10.1 (2018-11-14)

• Fix auth_methods for LDAP and GitHub. [Eugene Kossyak]

3.10.0 (2018-11-12)

• Stop using deprecated methods. [Terry Howe]
• Fix for hvac 0.7.0. [Terry Howe]
• Added method to get iam role from ec2 metadata. [simonmacklin]
• Added methods for iam auth. [Simon Macklin]
• Only set cacert and capath if env set. [Terry Howe]
• Fix missing cert info for lookups. [Clinton Judy]
• Fix hashivault_write secret parameter description. [Manuel Tiago Pereira]

3.9.8 (2018-10-11)

• Added AWS create role module. [Simon Macklin]
• Ad wrap_ttl support to approle secret create. [Terry Howe]
• Rename hashivault_policy_set_from_file and test. [Terry Howe]
• Update hashivault_policy_set_file.py. [drewmullen]
• Update README.rst. [drewmullen]
• New param, rules_file and set rules to open( rules_file content ) [Drew Mullen]
• Add some unicode support. [Terry Howe]
• Add support of token from ansible environment. [Terry Howe]
• Override environment variables with ansible variables. [Terry Howe]
• Fix tests again. [Terry Howe]
• Get rid of extraneous spaces. [Terry Howe]
• Fix tests for list audit backends, list secret backends. [Terry Howe]
• Fix list policy tests and list auth backends test. [Terry Howe]
• Add period parameter on token creation. [Konstantin Privezentsev]

3.9.7 (2018-08-29)

• Secrets enable options support. [kevin2seedlink]
• Fix readme. [Clinton Judy]
• Comment out readonly token for now. [Terry Howe]
• Little better upload script. [Terry Howe]

3.9.6 (2018-07-04)

• Support VAULT_CACERT for lookup plugin. [Terry Howe]
• Improved documentation about export variables. [Ivan N]

3.9.5 (2018-05-19)

• Strip whitespace from vault token file contents. [George Pchelkin]
• Add parameters to approle create role secret. [Terry Howe]
• Add parameters to approle create role. [Terry Howe]

3.9.4 (2018-04-25)

• TLS auth option [Christopher Valles]

3.9.3 (2018-04-12)

• Make key optional for lookup plugin [Marcin Wolny]

3.9.2 (2018-03-18)

• Mark ttl and max_ttl changed if parsed values differ. [Terry Howe]

3.9.1 (2018-03-17)

• Add change log and gitchangelog. [Terry Howe]

3.9.0 (2018-03-03)

• Test refactor. [Terry Howe]
• Amend the hashivault_policy_get to return a failure status when a policy doesn't exist rather than a positive response with a Null set. [Danny Webb]
• Fix secret list and isolate test. [Terry Howe]

3.8.6 (2018-02-22)

• Revert the read in hashivault_write. [Terry Howe]
• Update docs of modules - authtype option. [Vladislav Saveliev]

3.8.5 (2018-02-20)

• Add installation instructions and bump release. [Terry Howe]
• Selectively enable check mode. [Marc Sensenich]
• Check for changes even if not updating. [Marc Sensenich]
• Revert changes to test.yml. [Marc Sensenich]
• Use local params to limit code changes. [Marc Sensenich]
• Add Check Mode to HashiVault Write. [Marc Sensenich]
• Automated tests for py3. [Terry Howe]

3.8.4 (2018-02-06)

• Py3 compatibility. [Terry Howe]

3.8.3 (2018-02-06)

• Rename file read/write to to/from. [Terry Howe]
• Created modules and action plugins for reading and writing file secrets. [GIBSON, NICHOLAS R]
• Change okifmissing to default. [Terry Howe]
• Added variable ok_if_missing to return an empty result if searched key does not exists. [Bruno Soares]

3.8.2 (2018-01-04)

• Check un/sealed and return correct status. [Carlo Blohm]
• Add example sandbox. [Terry Howe]

3.8.1 (2017-12-31)

• Add userpass tempate. [Terry Howe]
• Ldap and userpass support from env. [Terry Howe]

3.8.0 (2017-12-30)

• Add the rest of the approle modules. [Terry Howe]
• Minimum approle modules. [Terry Howe]
• Use templates for env files. [Terry Howe]
• Add namespace for approle and fix lookup plugin. [Terry Howe]
• Reuse test_secret rather than include. [Terry Howe]
• Add newline on env file. [Terry Howe]
• Added approle authentication. [GIBSON, NICHOLAS R]
• Allow update on non existing attribute. [Terry Howe]
• Split out secret and ephemeral testing. [Terry Howe]
• Read secrets only for update. [Terry Howe]
• Add changed flag support for hashivault_write. [Jean-Yves Rivallan]
• Add documentation for mount tune. [Terry Howe]

3.7.0 (2017-11-11)

• Fix up tune mount docs. [Terry Howe]
• Add mount tune module. [Marc Sensenich]

3.6.0 (2017-11-11)

• Use no_log on create user functional test. [Terry Howe]
• Fix hvac 0.3.0 change. [Terry Howe]
• Get rid of warnings for tests. [Terry Howe]
• See if travis deals with ipc locker better. [Terry Howe]

3.5.1 (2017-10-10)

• Add the ability to define a mount point for Auth backends. [Marc Sensenich]

3.5.0 (2017-10-04)

• Fix typos in module_utils/hashivault.py. [Nathan Randall]

• Add documentation for TLS auth support. [Nathan Randall]

• Add support for TLS connections via hvac client. [Nathan Randall]

  Adds support for using strong, (potentially) mutually-authenticated TLS connections to Hashicorp Vault API.

  Adds parameters to allow user to specify paths for client cert and client key in order to support TLS mutual authentication with Vault HTTP API, where the hvac client includes Python 'requests' and passes the client cert and client key as a tuple argument to the 'cert' param supplied to a requests.Session object. Depending on what params/values are supplied by user, the value for 'verify' (as passed to the requests.Session object) will be either True, False, or (preferrably) the path to a CA cert or directory of CA certs to use for TLS auth validation.

  Updates argument_spec with new params for TLS client authentication :

  • ca_cert
  • ca_path
  • client_cert
  • client_key

  Updates documentation with info about ^^new params^^ and their defaults.

3.4.1 (2017-07-31)

• Removed empty set fact in test. [Jaime Soriano Pastor]
• Don't try to remove a policy that doesn't exist. [Jaime Soriano Pastor]
• Don't enable auth backend if it's already enabled. [Jaime Soriano Pastor]
• Don't set policy if current policy is the same. [Jaime Soriano Pastor]
• Don't try to enable secret if it's already enabled. [Jaime Soriano Pastor]
• Add lookup token parameter. [Terry Howe]
• Add test audit back in. [Terry Howe]

3.4.0 (2017-07-28)

• Add better delete verification. [Terry Howe]
• Remove deprecated call from update. [Terry Howe]
• Add delete secret capability. [David de Sousa]

3.3.0 (2017-07-21)

• Added modules for rekey. [Bharath Channakeshava]

• Bumping version number. Setting no_parent type to bool, default False. [T.J. Telan]

• Bumping version number. Setting types for accessor and wrap_ttl. [T.J. Telan]

• Adding token create and token lookup modules. Adding an integration test with secrets and policies using non-root tokens. [T.J. Telan]

• Speeding up tests setting gather_facts to no. [T.J. Telan]

• Adding fixes for running tests in os x. [T.J. Telan]

• Merge remote-tracking branch 'upstream/master' [T.J. Telan]

• Adding example usage for hashivault_token_lookup. [T.J. Telan]

• Adding token lookup. [T.J. Telan]

• Supporting all of the options for the token create api call. [T.J. Telan]

• Adding support for creating tokens, and adding tests that do not use root_token. [T.J. Telan]

• Just refactoring. No more using fail. I negated the logic in their check and added it as an assert condition. [T.J. Telan]

• Starting some major work in test.yml to make it a bit more rigorous - We only need to provide VAULT_ADDR now. [T.J. Telan]

• Updating test_init.yml * Adding names to tasks so it is easier to see which code paths were executed * Reorganizing asserts under names * Changed how we check on the keys, and root tokens using 'is defined' [T.J. Telan]

• Read task can read whole secrets. [Jaime Soriano Pastor]

• Add travis build badge. [Terry Howe]

• Fix test runner for travis. [Jaime Soriano Pastor]

  Mainly remove the dependency on mlock, that doesn't look allowed in travis sandbox.

  It also waits now for docker to be healthy instead of just for the open port.

  And some other refactorizations in start script to increase readability.

• Add build script. [Terry Howe]

• Add travis yml. [Terry Howe]

• Fix test for ansible 2.3.1.0. [Terry Howe]

• Write keys and tokens to file. [Terry Howe]

• Check to make sure VAULT_KEYS set for unseal test. [Terry Howe]

3.2.0 (2017-06-26)

• Add support for pgp public keys during vault init. [Bharath Channakeshava]

3.1.0 (2017-06-14)

• New release to set keys and threshold on init. [Terry Howe]
• Lots of things happened [Terry Howe]
• Create hashivault package. [Terry Howe]