Starstruk Logo MarkStarstruk

v1.17.2

hashicorp/vaultv1.17.2Jul 10, 2024by hc-github-team-es-release-engineering

AI Summary

This release bumps the Go version to 1.22.5 and updates the Azure secrets engine. It adds support for STS session tags in the AWS secrets engine and fixes issues with TCP listeners, performance standbys, and TOTP handling.

Key Highlights

  • Add support for STS session tags in AWS secrets engine
  • Bump Go version to 1.22.5
  • Update Azure secrets engine plugin to v0.19.2
  • Fix TCP listener closing with proxy_protocol_behavior set to 'deny_unauthorized'
  • Fix performance standbys not handling rotate root requests

New Features

  • AWS secrets engine STS session tags support

Full Release Notes

## 1.17.2
### July 10, 2024

CHANGES:

* core: Bump Go version to 1.22.5
* secrets/azure: Update plugin to v0.19.2 [[GH-27652](https://github.com/hashicorp/vault/pull/27652)]

FEATURES:

* **AWS secrets engine STS session tags support**: Adds support for setting STS
session tags when generating temporary credentials using the AWS secrets
engine. [[GH-27620](https://github.com/hashicorp/vault/pull/27620)]

BUG FIXES:

* cli: Fixed issue with `vault hcp connect` where HCP resources with uppercase letters were inaccessible when entering the correct project name. [[GH-27694](https://github.com/hashicorp/vault/pull/27694)]
* core (enterprise): Fix HTTP redirects in namespaces to use the correct path and (in the case of event subscriptions) the correct URI scheme. [[GH-27660](https://github.com/hashicorp/vault/pull/27660)]
* core/config: fix issue when using `proxy_protocol_behavior` with `deny_unauthorized`, 
which causes the Vault TCP listener to close after receiving an untrusted upstream proxy connection. [[GH-27589](https://github.com/hashicorp/vault/pull/27589)]
* core: Fixed an issue with performance standbys not being able to handle rotate root requests. [[GH-27631](https://github.com/hashicorp/vault/pull/27631)]
* secrets/transit (enterprise): Fix an issue that caused input data be returned as part of generated CMAC values.
* ui: Display an error and force a timeout when TOTP passcode is incorrect [[GH-27574](https://github.com/hashicorp/vault/pull/27574)]
* ui: Ensure token expired banner displays when batch token expires [[GH-27479](https://github.com/hashicorp/vault/pull/27479)]