Skip to content

v2.0.0

Latest
Latest

Choose a tag to compare

View all tags
@vijayg10 vijayg10 released this 09 Dec 17:21
· 26 commits to main since this release
v2.0.0
c71d690
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Overview

This release introduces significant improvements to the Vault integration, including profile-based deployment, enhanced security, KV v2 secrets engine, and automatic secret updates.

New Features

  1. Security benefits:
    • Unseal Key - Vault unseal keys are not stored on disk anymore
    • AppRole authentication - No persistent root token usage
    • Tmpfs volumes - Secrets in memory only, never on disk
    • Read-only mounts - Services can't modify secrets
    • Isolated profiles - Vault runs independently
  2. Profile-Based Vault deployment separation to avoid frequent sealing on services restart
  3. Shared Volume Architecture
  4. Interactive Secret Creation Script - prompts for AUTH_CLIENT_SECRET and PORTAL_PASSWORD
  5. Vault Unseal Status Monitoring
  6. Automatic Secret Rendering
  7. Vault automatic unsealing script provided

Breaking Changes

`This is a complete refactor of the volumes and Docker Compose profiles. It’s recommended to remove the Docker volumes and restart the PM4ML by following the new README.

Full Changelog: v1.0.0...v2.0.0

Assets 2
Loading