SECURITY CHANGES:
- Verify that OTPs conform to UUID format [7a831a5]
IMPROVEMENTS:
- Added
allowed_roles
option to configuration, which enforces specified role names to be present in the verification response received by the agent.
UPGRADE NOTES:
- The option
allowed_roles
is a breaking change. When vault-ssh-helper is upgraded, it is required that the existing configuration files have an entry forallowed_roles="*"
to be backwards compatible.
SECURITY CHANGES:
- Introduced
dev
mode. Ifdev
mode is not activated,vault-ssh-helper
can only communicate with Vault that has TLS enabled [f7a8707]
IMPROVEMENTS:
- Updated the documentation [GH-12]
BUG FIXES:
- Empty check for
allowed_cidr_list
[9acaa58]
- Initial release