Skip to content

v1.4.13

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Mar 03:35
· 122 commits to main since this release
v1.4.13
3e55afe
This commit was signed with the committer’s verified signature.
Esity Matthew Iverson
GPG key ID: F503555D3DD57A51
Verified
Learn about vigilant mode.

Added

  • Kerberos auto-auth to Vault on boot (auth_method: 'kerberos' per cluster)
  • KerberosAuth module: client-side SPNEGO token acquisition via lex-kerberos, Vault token exchange
  • TokenRenewer: plain-Thread token lifecycle (renew at 75% TTL, re-auth via Kerberos, exponential backoff 30s-10min)
  • kerberos settings block in vault cluster config (service_principal, auth_path)
  • auth_method dispatch in connect_all_clusters (kerberos, ldap, token)

Changed

  • Token renewal no longer depends on Extensions::Actors::Every (starts at boot, not after extensions load)
  • Removed actor-dependent renewer guard from connect_vault
Assets 3
Loading