0.29.0
🚨 Breaking changes
-
Vault userpass auth adapter got renamed from
basic
touserpass
.This change is to align the naming with the Vault's auth method.
-
Vault token auth adapter no longer reads token from keyring.
Vault only provide short-lived tokens, so it is not practical to store them in keyring.
✨ Enhancements
-
The secrets section in the config file now supports list as well as dictionary.
secrets: - name: secret1 source: vault path: secret/sample field: token - name: secret2 source: plaintext value: example
-
Deprecate the
teleport+vault
keywordThis keyword was used to configure the Teleport-integrated Vault secret provider.
It is now covered byvault
. -
Command
keyring set
now accepts password from stdin
🚧 Internal changes
- Revise the documentation to ensure consistency across different providers.
- Refactor the configuration parser. Internally switch from using
dict
to Pydantic models. - Refactor layout of the adapter classes to make the code more extensible.