v2.2.0

• General
  • Add meaningful, codified exit codes to enable better automated integrations
  • Improved documentation
  • Support for GUI-based password prompts via the VAULTED_ASKPASS environment variable
• Session Cache
  • Store the name of the session in the cache
  • Expirations are no longer stored as unix epochs (this will invalidate existing cached sessions)
  • Expiration tolerance is now 15 minutes (up from 5 minutes)
  • Credentials are now cached before performing an assume role (this lifts the 1 hour restriction when a vault is configured to assume a role)
• Add
  • Fix to complain if the vault already exists
  • Prompt to import existing credentials from environment variables
• Edit
  • Fix to complain if the vault doesn't already exist
  • Usability and color tweaks
  • Emphasize temporary credential usage (clarifying that the access key provided will not, necessarily, match those in a resulting session)
  • Warn when using STS if MFA isn't configured (AWS STS doesn't allow IAM calls unless MFA is configured)
• Env
  • Fix scoping issue when setting fish environment variables
  • Fix suggested command for loading environment variables into fish and sh-like shells
  • Add --format flag to allow custom output formatting
  • Add --assume flag to allow ad-hoc role assumption (if no vault is specified when --assume is provided, credentials are loaded from default locations such as the environment)
  • Add VAULTED_ENV_EXPIRATION variable specified in RFC3339 format
  • Add VAULTED_ENV_ROLE_ARN, VAULTED_ENV_ROLE_NAME, VAULTED_ENV_ROLE_PATH, and VAULTED_ENV_ROLE_ACCOUNT_ID variables when assuming a role
• Shell
  • Add --assume flag to allow ad-hoc role assumption (if no vault is specified when --assume is provided, credentials are loaded from default locations such as the environment)
  • Add VAULTED_ENV_EXPIRATION variable specified in RFC3339 format
  • Add VAULTED_ENV_ROLE_ARN, VAULTED_ENV_ROLE_NAME, VAULTED_ENV_ROLE_PATH, and VAULTED_ENV_ROLE_ACCOUNT_ID variables when assuming a role