v0.0.1

Release Notes

All notable changes to this project will be documented in this file.

[v0.0.1] - 2020-04-17

Table of Contents

• Components
• Installation Instructions for the Suite Release Version of Conjur
• Upgrade Instructions
• Changes

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

• cyberark/conjur v1.5.0 (2020-03-23)
• cyberark/conjur-oss-helm-chart v1.3.8 (2019-12-20)
• cyberark/conjur-google-cloud-marketplace v1.2.0 (2018-12-06)
• cyberark/conjur-cli v6.2.2 (2020-04-02)
• cyberark/conjur-api-dotnet v1.4.0 (2018-07-05)
• cyberark/conjur-api-go v0.6.0 (2019-03-04)
• cyberark/conjur-api-java v2.0.0 (2018-07-12)
• cyberark/conjur-api-python3 v0.0.5 (2019-12-06)
• cyberark/conjur-api-ruby v5.3.1 (2018-09-24)
• cyberark/conjur-authn-k8s-client v0.16.1 (2020-02-18)
• cyberark/secrets-provider-for-k8s v0.4.0 (2020-01-23)
• cyberark/conjur-service-broker v1.1.1 (2020-01-29)
• cyberark/cloudfoundry-conjur-buildpack v2.1.3 (2020-01-29)
• cyberark/ansible-conjur-host-identity v0.3.1 (2019-02-27)
• cyberark/conjur-credentials-plugin v0.8.0 ()
• cyberark/conjur-puppet v2.0.2 (2019-12-18)
• cyberark/terraform-provider-conjur v0.3.0 (2020-04-13)
• cyberark/secretless-broker v1.5.2 (2020-02-24)
• cyberark/summon v0.8.1 (2020-03-02)
• cyberark/summon-aws-secrets v0.3.0 (2019-03-06)
• cyberark/summon-chefapi v0.1.1 (2015-12-09)
• cyberark/summon-conjur v0.5.3 (2019-02-06)
• cyberark/summon-keyring v0.2.1 (2015-06-29)
• cyberark/summon-s3 v0.2.0 (2017-11-22)

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

• Docker or docker-compose

  Set the container image tag to cyberark/conjur:1.5.0.
  For example, make the following update to the conjur service in the quickstart docker-compose.yml

  image: cyberark/conjur:1.5.0
  

• Cloud Formation templates for AWS

  Set the environment variable CONJUR_VERSION before building the AMI:

  export CONJUR_VERSION="1.5.0"
  ./build-ami.sh
  

• Conjur OSS Helm chart

  Update the image.tag value and use the appropriate release of the helm chart:

  helm install ... \
    --set image.tag="1.5.0" \
    ...
    https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v1.3.8/conjur-oss-1.3.8.tgz
  

Upgrade Instructions

Upgrade instructions are available for the following components:

• cyberark/conjur
• cyberark/conjur-google-cloud-marketplace

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

• cyberark/conjur
• cyberark/conjur-oss-helm-chart
• cyberark/conjur-google-cloud-marketplace
• cyberark/conjur-cli
• cyberark/conjur-api-dotnet
• cyberark/conjur-api-go
• cyberark/conjur-api-java
• cyberark/conjur-api-python3
• cyberark/conjur-api-ruby
• cyberark/conjur-authn-k8s-client
• cyberark/secrets-provider-for-k8s
• cyberark/conjur-service-broker
• cyberark/cloudfoundry-conjur-buildpack
• cyberark/ansible-conjur-host-identity
• cyberark/conjur-credentials-plugin
• cyberark/conjur-puppet
• cyberark/terraform-provider-conjur
• cyberark/secretless-broker
• cyberark/summon
• cyberark/summon-aws-secrets
• cyberark/summon-chefapi
• cyberark/summon-conjur
• cyberark/summon-keyring
• cyberark/summon-s3

cyberark/conjur

v1.4.6 (2020-01-21)

• Changed
  • K8s hosts' application identity is extracted from annotations or id. If it is
    defined in annotations it will taken from there and if not, it will be taken
    from the id.

v1.4.7 (2020-03-12)

• Changed
  • Improved flows and rules around user creation (#1272)
  • Kubernetes authenticator now returns 403 on unpermitted hosts instead of a 401 (#1283)
  • Conjur hosts can authenticate with authn-k8s from anywhere in the policy branch (#1189)
• Fixed
  • Updated broken links on server status page (#1341)

v1.5.0 (2020-03-23)

• Added
  • Hosts can authenticate from Azure VMs using an Azure access token. See
    design for details
    (conjurinc/appliance#927).
• Changed
  • Lock rotators to prevent multiple rotations from incurring simultaneously.
• Fixed
  • Fix support for using deployment as K8s authentication resource type for Kubernetes >= 1.16
    (#1440)

cyberark/conjur-oss-helm-chart

v1.3.8 (2019-12-20)

• Added
  • Added basic instructions on how to package the chart
  • Added gitleaks config to repo
• Changed
  • Updated deployments to be able to run on Kubernetes 1.16+
  • Updated e2e scripts to support newest helm (v.1.3.8)
• Removed
  • Removed GitLab pipeline (it wasn't working anyways)

cyberark/conjur-google-cloud-marketplace

v1.2.0 (2018-12-06)

• Changed
  • Authenticators parameter was added to configuration UI. See conjur-oss Helm chart configuration.

cyberark/conjur-cli

v6.1.0 (2018-04-09)

• Added
  • Pin dependency 'conjur-api' to '~> 5.1'. This update adds authn-local support to the API. conjur-api PR #131

v6.2.1 (2019-05-22)

• Added
  • Pin to xdg gem v2.2.3 due to a crashing CLI.

v6.2.2 (2020-04-02)

• Changed
  • Docker image updated to flatten to a single layer and reduce the image
    size (cyberark/conjur-cli#253)
• Fixed
  • CLI image is only updated in DockerHub when the project has a new tag
    (cyberark/conjur-cli#270)
• Security
  • Update rake for CVE-2020-8130 (cyberark/conjur-cli#263)

cyberark/conjur-api-go

v0.6.0 (2019-03-04)

• Added
  • Converted to Golang 1.12
  • Started u...