v1.1.0-alpha.0
Pre-release
Pre-release
What's Changed
- The agent now reports the annotations and labels of namespaces and secrets. (#581, #582)
- The agent now exposes readiness and liveness probes. (#580)
- In Venafi Cloud Key Pair Service Account mode, you can now omit the
server
field in the configuration file. It defaults to the URLhttps://api.venafi.cloud
. If you are in the european region, you still need to setserver: https://api.venafi.eu
field in the configuration file. (#575)
- It is now possible to use the
--period
flag without also giving theperiod
field. (#575) - Helm chart values are now validated to alert you if they contain errors to help you quickly identify typos in fields. (#556)
- The "unauthenticated mode" has been removed as it made it hard to diagnose mismatched authentication flags. For example, using
--venafi-cloud
without--credentials-file
/-k
used to not show any error and the Agent would happily start. Now, if you don't provide the right set of authentication flags, the Agent will show a helpful message explaining how the authentication flags can be used. (#575) - The
--help
has been re-written to help understanding how authentication flags interact with each other. (#575) - You can no longer use
--private-key-path
along with--credentials-path
. Previously,--private-key-path
would be ignored if--credentials-path
was provided. Now, the two options are mutually exclusive and a helpful message is shown when trying to use both. (#575) - The flag
--private-key-path
now defaults to the empty string. It previously defaulted to/etc/venafi/agent/key/privatekey.pem
and the flag was omitted from the deployment manifest, which was confusing to users trying to understand how this private key was being configured. A helpful message is now shown when trying to run--client-id
without--private-key-path
. (#575) - The field
uploader_id
in the configuration file is deprecated. Setting this field will no longer do anything. A warning is now shown when using this field. The reason this field was deprecated is that it was never used by the Venafi Cloud API. Behind the scenes, theuploader_id
is arbitrarily set tono
so that the API doesn't complain. (#575) - The binary's size has been reduced from 72 MB down to 55 MB. (#556)
- The Docker image is now built using cert-manager's base image based on apko's alpine image using
ko
. As a result, the binary's location in the image is now located at/ko-app/preflight
instead of/bin/preflight
. (#556)
Full Changelog: v1.0.0...v1.1.0-alpha.0