mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-21 22:51:09 +02:00
84d734d673
* document known issue for azure secrets engine failing on role creation * fix empty space * remove new line * add workaround * remove space --------- Co-authored-by: Tony Wittinger <anwittin@users.noreply.github.com>
252 lines
8.7 KiB
Plaintext
252 lines
8.7 KiB
Plaintext
---
|
|
layout: docs
|
|
page_title: "1.16.1 release notes"
|
|
description: |-
|
|
Key updates for Vault 1.16.1
|
|
---
|
|
|
|
# Vault 1.16.1 release notes
|
|
|
|
**GA date:** 2024-04-04
|
|
|
|
@include 'release-notes/intro.mdx'
|
|
|
|
## Important changes
|
|
|
|
| Version | Change |
|
|
|-----------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
|
|
| 1.16.0+ | [Existing clusters do not show the current Vault version in UI by default](/vault/docs/upgrading/upgrade-to-1.16.x#default-policy-changes) |
|
|
| 1.16.0+ | [Default LCQ enabled when upgrading pre-1.9](/vault/docs/upgrading/upgrade-to-1.16.x#default-lcq-pre-1.9-upgrade) |
|
|
| 1.16.0+ | [External plugin environment variables take precedence over server variables](/vault/docs/upgrading/upgrade-to-1.16.x#external-plugin-variables)
|
|
| 1.16.0+ | [LDAP auth entity alias names no longer include upndomain](/vault/docs/upgrading/upgrade-to-1.16.x#ldap-auth-entity-alias-names-no-longer-include-upndomain)
|
|
| 1.16.0+ | [Azure secrets engine role creation failing](/vault/docs/upgrading/upgrade-to-1.16.x#azure-secrets-engine-role-creation-failing)
|
|
|
|
## Vault companion updates
|
|
|
|
Companion updates are Vault updates that live outside the main Vault binary.
|
|
|
|
<table>
|
|
<thead>
|
|
<tr>
|
|
<th style={{verticalAlign: 'middle'}}>Release</th>
|
|
<th style={{verticalAlign: 'middle'}}>Update</th>
|
|
<th style={{verticalAlign: 'middle'}}>Description</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Vault Secrets Operator (v0.5)
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>ENHANCED</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Use templating to format, transform, and decode secrets before syncing to
|
|
Kubernetes secret.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/platform/k8s/vso/secret-transformation">Secret data transformation</a>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
|
|
## Core updates
|
|
|
|
Follow the learn more links for more information, or browse the list of
|
|
[Vault tutorials updated to highlight changes for the most recent GA release](/vault/tutorials/new-release).
|
|
|
|
<table>
|
|
<thead>
|
|
<tr>
|
|
<th style={{verticalAlign: 'middle'}}>Release</th>
|
|
<th style={{verticalAlign: 'middle'}}>Update</th>
|
|
<th style={{verticalAlign: 'middle'}}>Description</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Endpoint hardening
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>ENHANCED</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Minimize network exposure by selectively redacting select fields like IP
|
|
addresses, cluster names, and Vault version from the HTTP responses of
|
|
your Vault server.
|
|
<br /><br />
|
|
Learn more:
|
|
<a href="/vault/docs/configuration/listener/tcp#redact_addresses"><tt>redact_addresses</tt> parameter</a>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
External plugins
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>GA</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Run external plugins in their own container with native container platform
|
|
controls.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/plugins/containerized-plugins">Containerize Vault plugins</a>
|
|
</td>
|
|
</tr>
|
|
|
|
</tbody>
|
|
</table>
|
|
|
|
## Enterprise updates
|
|
|
|
<table>
|
|
<thead>
|
|
<tr>
|
|
<th style={{verticalAlign: 'middle'}}>Release</th>
|
|
<th style={{verticalAlign: 'middle'}}>Update</th>
|
|
<th style={{verticalAlign: 'middle'}}>Description</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Long-term support
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>GA</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Reduce risk and operational overhead with Vault Enterprise Long-Term
|
|
Support (LTS) releases.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/enterprise/lts">LTS overview</a>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Vault GUI
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>GA</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Configure custom messages and display those messages to targeted users in
|
|
the Vault GUI.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/ui/custom-messages">Custom UI messages</a>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Audit logging
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>GA</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Filter audit logs to write data to different destinations based on the content.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/enterprise/audit/filtering">Filter syntax for audit results</a>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Static secret caching
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>GA</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Use Vault Proxy to cache static secrets for a set period of time and receive
|
|
event notifications when secrets change.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/agent-and-proxy/proxy/caching/static-secret-caching">Vault Proxy static secret caching</a>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Event notifications
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>GA</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Subscribe to notifications for various events in Vault. Includes support
|
|
for filtering, permissions, and cluster configurations with K-V secrets.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/concepts/events">Events</a>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Public Key Infrastructure (PKI)
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>BETA</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Automate certificate lifecycle management for IoT/EST enabled devices with
|
|
native EST protocol support
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/secrets/pki/est">Enrollment over Secure Transport (EST)</a>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Default lease count quotas
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>GA</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
New server deployments automatically create a lease count quota in the
|
|
root namespace with a 300K limit.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/enterprise/lease-count-quotas">Lease count quotas</a>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
License utilization reporting
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>ENHANCED</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Use the Vault CLI to bundle and report usage data to HashiCorp for
|
|
clusters that do not report license utilization data automatically.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/enterprise/license/manual-reporting">Manual license utilization reporting</a>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Secrets sync
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>GA</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
Sync Key Value (KV) v2 data between Vault and secrets managers from AWS,
|
|
Azure, Google Cloud Platform (GCP), GitHub, and Vercel.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/sync">Secrets Sync</a>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
AWS plugin
|
|
</td>
|
|
<td style={{verticalAlign: 'middle', textAlign: 'center'}}>GA</td>
|
|
<td style={{verticalAlign: 'middle'}}>
|
|
|
|
Use automatic identity tokes for workload identity federation
|
|
authentication flows with the AWS secret engine without explicitly
|
|
configuring sensitive security credentials.
|
|
<br /><br />
|
|
Learn more: <a href="/vault/docs/secrets/aws">AWS secrets engine</a>
|
|
</td>
|
|
</tr>
|
|
|
|
</tbody>
|
|
</table>
|
|
|
|
## Feature deprecations and EOL
|
|
|
|
Deprecated in 1.16 | Retired in 1.16
|
|
------------------ | ---------------
|
|
None | None
|
|
|
|
@include 'release-notes/deprecation-note.mdx'
|