Skip to content

v0.7.0

Compare
Choose a tag to compare
@hc-github-team-wg-packagespec hc-github-team-wg-packagespec released this 17 Nov 22:52
18de365

0.7.0 (2021/11/17)

Deprecations/Changes

  • tls: Boundary's support for TLS 1.0/1.1 on the API listener was broken. Rather
    than fix this, we are simply not supporting TLS 1.0/1.1 as they are insecure.

New and Improved

  • Boundary now supports dynamic discovery of host resources using our (currently
    internal) new plugin system. See the
    documentation for configuration
    instructions. Currently, only Azure and AWS are supported, but more providers
    will be following in future releases.
  • workers: The existing worker connection replay prevention logic has been
    enhanced to be more robust against attackers that have decryption access to
    the shared worker-auth KMS key
    (PR)

Bug Fixes

  • tls: Support TLS 1.2 for more clients. This was broken for some clients due to
    a missing mandated cipher suite of the HTTP/2 (h2) specification that could
    result in no shared cipher suites between the Boundary API listener and those
    clients. (PR)
  • vault: Fix credential store support when using Vault namespaces
    (Issue,
    PR)