Starstruk Logo MarkStarstruk

v1.15.3

hashicorp/vaultv1.15.3Nov 30, 2023by hc-github-team-es-release-engineering

AI Summary

Optimizes the unseal process for namespaces and fixes UI sorting and JSON editor issues. Includes panic fixes for transit key exports and OCSP handling.

Key Highlights

  • Enterprise: Speed up unseal process when using namespaces
  • UI: Sort list view of entities and aliases alphabetically
  • UI: Fix JSON editor in KV V2 unable to handle pasted values
  • Fixed panic when attempting to export a public RSA key in transit
  • Fixed error when tuning token auth configuration within namespace

New Features

  • UI sorts entities and aliases alphabetically using the item name

Full Release Notes

## 1.15.3
### November 30, 2023

CHANGES:

* core: Bump Go version to 1.21.4.

IMPROVEMENTS:

* core (enterprise): Speed up unseal when using namespaces
* core: update sys/seal-status (and CLI vault status) to report the type of
the seal when unsealed, as well as the type of the recovery seal if an
auto-seal. [[GH-23022](https://github.com/hashicorp/vault/pull/23022)]
* secrets/pki: do not check TLS validity on ACME requests redirected to https [[GH-22521](https://github.com/hashicorp/vault/pull/22521)]
* ui: Sort list view of entities and aliases alphabetically using the item name [[GH-24103](https://github.com/hashicorp/vault/pull/24103)]
* ui: capabilities-self is always called in the user's root namespace [[GH-24168](https://github.com/hashicorp/vault/pull/24168)]

BUG FIXES:

* activity log (enterprise): De-duplicate client count estimates for license utilization reporting.
* auth/cert: Handle errors related to expired OCSP server responses [[GH-24193](https://github.com/hashicorp/vault/pull/24193)]
* core (Enterprise): Treat multiple disabled HA seals as a migration to Shamir.
* core/audit: Audit logging a Vault response will now use a 5 second context timeout, separate from the original request. [[GH-24238](https://github.com/hashicorp/vault/pull/24238)]
* core/config: Use correct HCL config value when configuring `log_requests_level`. [[GH-24059](https://github.com/hashicorp/vault/pull/24059)]
* core/quotas: Close rate-limit blocked client purge goroutines when sealing [[GH-24108](https://github.com/hashicorp/vault/pull/24108)]
* core: Fix an error that resulted in the wrong seal type being returned by sys/seal-status while
Vault is in seal migration mode. [[GH-24165](https://github.com/hashicorp/vault/pull/24165)]
* replication (enterprise): disallow configuring paths filter for a mount path that does not exist
* secrets-sync (enterprise): Fix panic when setting usage_gauge_period to none
* secrets/pki: Do not set nextUpdate field in OCSP responses when ocsp_expiry is 0 [[GH-24192](https://github.com/hashicorp/vault/pull/24192)]
* secrets/transit: Fix a panic when attempting to export a public RSA key [[GH-24054](https://github.com/hashicorp/vault/pull/24054)]
* ui: Fix JSON editor in KV V2 unable to handle pasted values [[GH-24224](https://github.com/hashicorp/vault/pull/24224)]
* ui: Fix error when tuning token auth configuration within namespace [[GH-24147](https://github.com/hashicorp/vault/pull/24147)]
* ui: show error from API when seal fails [[GH-23921](https://github.com/hashicorp/vault/pull/23921)]