v2.2.0

Change log

Added

• Support for using Summon environments in the secrets.yml file. Users can now
  divide their secrets.yml files into environments and specify which
  environment's secrets should be loaded at runtime using the new
  SECRETS_YAML_ENVIRONMENT environment variable. See the
  README
  for more information.
  cyberark/cloudfoundry-conjur-buildpack#44

Removed

• Support for using the Buildpack with Conjur Enterprise v4. We recommend
  users migrate to Dynamic Access Provider v11+ or Conjur OSS v1+.
  cyberark/cloudfoundry-conjur-buildpack#86

v2.1.6

[2.1.6] - 2020-01-11

Added

• A manifest.yml has been added, allowing for
  the usage of buildpack-packager
  and other native CloudFoundry features. Please refer
  to manifest.yml for information on
  dependencies and deprecation notices thereof, as well as a list
  of files included in the Buildpack.
  cyberark/cloudfoundry-conjur-buildpack#79

Changed

• The project has been reorganized to respect Cloudfoundry Buildpack
  best practices and improve maintainability. This also should
  reduce overall build times, and slightly reduces the size
  of the Conjur Buildpack .ZIP.
  PR cyberark/cloudfoundry-conjur-buildpack#99
• The default go version has been bumped to 1.15.x in the manifest,
  with other supported version listed as well.
  cyberark/cloudfoundry-conjur-buildpack#41
• Release tags will now be auto-archived in the latest branch. Users
  consuming this buildpack via the online buildpack functionality should now
  point their manifests to the latest branch and only consume release versions
  of this buildpack.
  cyberark/cloudfoundry-conjur-buildpack#101

Deprecated

• Support for using the Conjur Buildpack with Conjur Enterprise v4 is now deprecated.
  Support will be removed in the next release.
  cyberark/cloudfoundry-conjur-buildpack#73

v2.1.5

[2.1.5] - 2020-11-06

Security

• Buildpack can no longer expose secret values when the secrets.yml includes an
  invalid variable name.
  Security Advisory

v2.1.4

Changed

• Go dependencies updated for the conjur-env binary.
  cyberark/cloudfoundry-conjur-buildpack#66

v2.1.3

Added

• Added a NOTICES.txt file for open source acknowledgements that is included
  in the release ZIP file

Changed

• The buildpack now properly reads Conjur credentials from VCAP_SERVICES when
  VCAP_SERVICES contains credentials for other services with the same field
  names (e.g. version).
• Go version for the conjur-env binary bumped to 1.13.6
• Go dependencies updated for the conjur-env binary

v2.1.2

Changed

• Buildpack supply step now scans application build directory for candidate secrets.yml files
  and reports them to the output. If no secrets.yml is found, the buildpack supply step will fail.

Added

• The runtime location for secrets.yml can now be configured by setting the
  SECRETS_YAML_PATH environment variable for the Cloud Foundry application. See
  the README for more information.

v2.1.1

Known Limitations

• Buildpack only supports secrets.yml stored in the application root directory or in BOOT-INF/classes/ at runtime

Changed

• Go version for online buildpack bumped to 1.12

v2.1.0

Known Limitations

• Buildpack only supports secrets.yml stored in the application root directory or in BOOT-INF/classes/ at runtime

Added

• Buildpack now searches for secrets.yml in BOOT-INF/classes/ to better support Java applications by default.
• Added support to use the Conjur buildpack as an online buildpack by referencing the github repository directly. See the README for more information.

Changed

• Buildpack now copies the secrets retrieval profile script into the application directory. This works around a missing feature in the Java buildpack, where it does not correctly source from the buildpacks profile directories.
• Go version of conjur-env binary bumped to 1.12
• Go binary updated to use native os homedir method instead of mitchellh lib

v2.0.1

Known Limitations

• Buildpack only supports secrets.yml stored in the application root directory at runtime

Fixed

• bin/compile script is made executable

v2.0.0

Known Limitations

• Buildpack only supports secrets.yml stored in the application root directory at runtime; Java applications with Spring Boot versions 1.4+ will not be compatible

Changed

• Buildpack is converted to a supply buildpack to support multi-buildpack usage
• Conjur-env binary dependencies are updated
• Conjur-env binary converted to use Go modules