Skip to content

v1.28.0-fips

Choose a tag to compare

@benhoyt benhoyt released this 29 Jan 02:49
· 53 commits to fips since this release

This is release v1.28.0, but on the fips branch (that is, with all cryptography removed). Specifically:

This release modifies GET /v1/plan to require admin access, to prevent secrets in environmental variables (common in 12-factor apps) from accidentally being shown to non-admin users. This is a breaking change, but should not affect the vast majority of users, as they're already connecting to the Pebble socket as admin (root or Pebble daemon UID), for example, Juju charms.

In addition, this release includes a couple of minor bug fixes, and a refactor that moves the code for identities out of the core state package.

See full changelog.