This version is still in development and is not considered stable yet. For the latest stable version, please use Spring Vault 3.1.2! |
New & Noteworthy
What’s new in Spring Vault 3.0
-
Upgrade to Spring Framework 6 and Java 17 baseline
-
Upgrade to AWS SDK 2.
What’s new in Spring Vault 2.4
-
Support for Username/Password authentication for Username/Password, LDAP, Okta, and RADIUS authentication.
-
Support of versioned Key/Value secrets engines for Vault repositories.
-
Optimistic locking support through Vault repositories using versioned Key/Value secrets engines.
What’s new in Spring Vault 2.3
-
Support for PEM-encoded certificates for keystore and truststore usage.
-
ReactiveVaultEndpointProvider
for non-blocking lookup ofVaultEndpoint
. -
VaultKeyValueMetadataOperations
for Key-Value metadata interaction. -
Support for
transform
secrets engine (Enterprise Feature). -
Documentation of how to use Vault secret backends.
-
Login credentials for Kubernetes and PCF authentication are reloaded for each login attempt.
-
SecretLeaseContainer
publishesSecretLeaseRotatedEvent
instead ofSecretLeaseExpiredEvent
andSecretLeaseCreatedEvent
on successful secret rotation. -
AbstractVaultConfiguration.threadPoolTaskScheduler()
bean type changed toTaskSchedulerWrapper
instead ofThreadPoolTaskScheduler
. -
Since 2.3.2:
GcpIamCredentialsAuthentication
What’s new in Spring Vault 2.2
-
Support for Key-Value v2 (versioned secrets engine) secrets through
@VaultPropertySource
. -
SpEL support in
@Secret
. -
Add support for Jetty as reactive HttpClient.
-
LifecycleAwareSessionManager
andReactiveLifecycleAwareSessionManager
emit nowAuthenticationEvent
s. -
Deprecation of
AppIdAuthentication
. UseAppRoleAuthentication
instead as recommended by HashiCorp Vault. -
CubbyholeAuthentication
and wrappedAppRoleAuthentication
now usesys/wrapping/unwrap
endpoints by default. -
Kotlin Coroutines support for
ReactiveVaultOperations
.
What’s new in Spring Vault 2.1
-
GCP Compute, GCP IAM, and Azure authentication.
-
Template API support for versioned and unversioned Key/Value secrets engines and for Vault wrapping operations.
-
Support full pull mode in reactive AppRole authentication.
-
Improved Exception hierarchy for Vault login failures.
What’s new in Spring Vault 2.0
-
Authentication steps DSL to compose authentication flows.
-
Reactive Vault client via
ReactiveVaultOperations
. -
Vault repository support based on Spring Data KeyValue.
-
Transit batch encrypt and decrypt support.
-
Policy management for policies stored as JSON.
-
Support CSR signing, certificate revocation and CRL retrieval.
-
RoleId/SecretId unwrapping for AppRole authentication.
-
Spring Security integration with transit secrets engine-based
BytesKeyGenerator
andBytesEncryptor
.
What’s new in Spring Vault 1.1.0
-
AWS IAM authentication.
-
Configuration of encryption/decryption versions for transit keys.
-
Pull mode for AppRole authentication.
-
Transit batch encrypt and decrypt support.
-
TTL-based generic secret rotation.