Release version 0.17.3

Changelog

f9be064 azure: add support for Azure managed identities
0e12ce4 cache: add offline caching of keys
0a52a99 cli: use correct policy name instead of command name
a229d68 config: restructure server initialization and configuration
79aa750 config: update server-config.yaml
abb4c3b fix printed admin identity on startup
f874de8 http: add tests for reading TLS private keys
2c76d12 status: expose backend KMS status
6634a0b testing: new package kestest

Docker images

• docker pull minio/kes:v0.17.3
• docker pull quay.io/minio/kes:v0.17.3

Release version 0.17.2

Changelog

6bdc0ff config: rename root identity (#160)
6c5eb7d tls: add support for encrypted private keys. (#161)

Docker images

• docker pull minio/kes:v0.17.2
• docker pull quay.io/minio/kes:v0.17.2

Release version 0.17.1

Changelog

23fcae9 vault: adjust key creation/deletion to Vault API (#159)

Docker images

• docker pull minio/kes:v0.17.1
• docker pull quay.io/minio/kes:v0.17.1

Release version 0.17.0

Changelog

f9fada6 Create SECURITY.md
507af83 Update SECURITY.md
780fcb7 auth: filter CA certificates when mapping client certificate to policy (#150)
960323f cache: if no cache expiry is provided, set default expiry (#146)
e9e907e fix error message (#158)
4c435cf fortanix: add support for Fortanix SDKMS
576e761 http: simplify request timeout handling (#154)
b0092c5 key: refactor key store backend API (#147)
283e933 metric: fix invalid type check for http.Flusher (#156)
b0819b6 metrics: improve CLI metrics UI
d182174 rename use_buildx -> use: buildx
c41c133 update prometheus dependency (#148)
c4379ce vault: ensure that a write to Vault actually succeeded (#144)

Docker images

• docker pull minio/kes:v0.17.0
• docker pull quay.io/minio/kes:v0.17.0

Release version 0.16.1

Changelog

ed28e20 api: new status API
d51a099 http: fix type conversion in timeout handler (#142)

Docker images

• docker pull minio/kes:v0.16.1
• docker pull quay.io/minio/kes:v0.16.1
• docker pull minio/kes:latest

Release version 0.16.0

Changelog

ef76ea3 add support for Azure KeyVault key store
a0a8311 secret: add key ID to encrypted keys (#141)

Docker images

• docker pull minio/kes:v0.16.0
• docker pull quay.io/minio/kes:v0.16.0
• docker pull minio/kes:latest

Release version 0.15.1

Changelog

1977371 improve request timeout handling (#139)
f627432 proxy: avoid passing nil as http.ResponseWriter to handlers (#140)
ceea0d6 test: enable policy and identity CI tests

Docker images

• docker pull minio/kes:v0.15.1
• docker pull quay.io/minio/kes:v0.15.1
• docker pull minio/kes:latest

Release version 0.15.0

Changelog

29ae29a Update docker release file to v0.14.0
f594e05 add ErrDecrypt error (#130)
01644f7 add release tag from docker build (#135)
7cbf05b add support for TLS 1.2
1936cd4 client: fix ListPolicies HTTP method
f1f9507 fix: release kes containers to quay.io as well
f116f88 metric: add counters for error and audit events
9ebb289 policy: add deny rules
6c4ab49 retry: set GetBody callback when request body is present
984966c use streaming API for listing identities (#129)
2932dc6 vault: add support for the K/V v2 engine (#136)
f4581d9 vault: return more descriptive error for K/V v2 backend

Docker images

• docker pull minio/kes:v0.15.0
• docker pull quay.io/minio/kes:v0.15.0
• docker pull minio/kes:latest

Release version 0.14.0

Changelog

046739a Update README.md
3138d73 Update README.md
1662518 add example for generating a new key
9153644 add internal/fips package for FIPS 140 support
6b23973 cli: fetch and visualize server metrics
92fa79d cli: fix incorrect handling of the context argument
b9e4806 client: add support for multiple server endpoints
75c2cc4 metrics: exclude the +Inf bucket when parsing metrics
8af5141 plugin: add generic KES KeyStore plugin v1 (#121)

Docker images

• docker pull minio/kes:v0.14.0
• docker pull minio/kes:latest

Release version 0.13.6

Changelog

dbb42f3 Update README.md
3f715d8 Update README.md
7d9921c add active request and uptime metrics
a310981 add mechanism to create keys in a declarative way
a232c17 add missing 'v' prefix for version
2ff3fb1 drop http/2 as minimum requirement HTTP version
548979f fix decoding of data encryption keys
a7def79 identity: add support for creating server certificates

Docker images

• docker pull minio/kes:v0.13.6
• docker pull minio/kes:latest