changelog++

This commit is contained in:
Jeff Mitchell 2017-03-02 17:37:48 -05:00
parent ebb798ec1b
commit bbe09f20d8

View File

@ -34,9 +34,9 @@ FEATURES:
cluster-local, focusing on horizontal scaling for high-throughput and cluster-local, focusing on horizontal scaling for high-throughput and
high-fanout deployments. high-fanout deployments.
* **Response Wrapping & Replication in the Vault Enterprise UI**: Vault * **Response Wrapping & Replication in the Vault Enterprise UI**: Vault
Enterprise UI now supports enabling response wrapping on requests, plus the Enterprise UI now supports looking up and rotating response wrapping tokens,
ability to look up, rotate, and create new response wrapping tokens. It also as well as creating tokens with arbitrary values inside. It also now
now supports replication functionality, enabling the configuration of a supports replication functionality, enabling the configuration of a
replication set in the UI. replication set in the UI.
* **Expanded Access Control Policies**: Access control policies can now * **Expanded Access Control Policies**: Access control policies can now
specify allowed and denied parameters -- and, optionally, their values -- to specify allowed and denied parameters -- and, optionally, their values -- to
@ -46,12 +46,13 @@ FEATURES:
See the [policies concepts See the [policies concepts
page](https://www.vaultproject.io/docs/concepts/policies.html) for more page](https://www.vaultproject.io/docs/concepts/policies.html) for more
information. information.
* **SSH Backend As Certificate Authority**: SSH backend can now be configured * **SSH Backend As Certificate Authority**: The SSH backend can now be
to sign host and user certificates. Each mount of the backend acts as an configured to sign host and user certificates. Each mount of the backend
independent signing authority. The CA key pair can be configured for each acts as an independent signing authority. The CA key pair can be configured
mount and the public key is accessible via an unauthenticated API call; for each mount and the public key is accessible via an unauthenticated API
additionally, the backend can generate a public/private key pair for you. We call; additionally, the backend can generate a public/private key pair for
recommend using separate mounts for signing host and user certificates. you. We recommend using separate mounts for signing host and user
certificates.
IMPROVEMENTS: IMPROVEMENTS: