Skip to content

Releases: cyberark/conjur-oss-suite-release

v1.19.5+suite.1

29 Jun 15:50
v1.19.5+suite.1
cea5fb4
Compare
Choose a tag to compare

Release Notes

All notable changes to this project will be documented in this file.

[v1.19.5+suite.1] - 2023-06-29

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.19.5.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.19.5
    
  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
      --set image.tag="1.19.5" \
      ...
      https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.6/conjur-oss-2.0.6.tgz
    

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.19.5 (2023-06-29)

  • Changed
  • Fixed
    • AuthnJWT now supports claims that include hyphens and inline namespaces.
      cyberark/conjur#2792
    • Authn-IAM now uses the host in the signed headers to determine which STS endpoint
      (global or regional) to use for validation.
  • Security

cyberark/conjur-cli-go

v8.0.10 (2023-06-29)

cyberark/conjur-api-java

v3.0.5 (2023-06-08)

cyberark/conjur-api-ruby

v5.4.1 (2023-06-14)

cyberark/cloudfoundry-conjur-buildpack

v2.2.8 (2023-06-21)

cyberark/conjur-service-broker

v1.2.10 (2023-06-21)

cyberark/conjur-authn-k8s-client

v0.25.1 (2023-06-12)

cyberark/secrets-provider-for-k8s

v1.5.1 (2023-05-26)

  • Security
    • Forced github.com/emicklei/go-restful/v3 to use v3.10.2 to remove PRISMA-2022-0227 (found in Twistlock scan)
      and updated versions of gotelemetry.io/otel (to 1.16.0), github.com/stretchr/testify (to 1.8.3), ...
Read more

v1.19.3+suite.1

28 Apr 20:50
9d4536b
Compare
Choose a tag to compare

Release Notes

All notable changes to this project will be documented in this file.

[v1.19.3+suite.1] - 2023-04-21

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.19.3.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.19.3
    
  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
      --set image.tag="1.19.3" \
      ...
      https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.6/conjur-oss-2.0.6.tgz
    

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.19.3 (2023-04-17)

  • Added
    • Conjur now logs when it detects that the Conjur configuration file
      (conjur.yml) or directory permissions prevent the Conjur server from
      successfully reading it. Conjur also now logs at the DEBUG level when it
      detects that either the directory or file do not exist.
      cyberark/conjur#2715
    • Account admin roles now have a corresponding resource. This ensures that
      access controls work as expected for this role to access itself.
      cyberark/conjur#2757
  • Changed
    • Removes support for disabling the CONJUR_FEATURE_PKCE_SUPPORT_ENABLED flag.
      cyberark/conjur#2713
    • Routes on the /roles/ API endpoints now correctly verify the existing of
      a Role and return 404 when it doesn't exist or the caller has insufficient
      privilege.
      cyberark/conjur#2755
  • Fixed
    • Fixed a thread-safety bug in secret retrieval when multiple threads attempt
      to decrypt a secret value with Slosilo/OpenSSL.
      cyberark/slosilo#31
      cyberark/conjur#2718
    • Incomplete HTTP proxy support in the Kubernetes Authenticator is fixed. This
      allows for an HTTP proxy between Conjur and the Kubernetes API.
      cyberark/conjur#2766
  • Security

cyberark/conjur-oss-helm-chart

v2.0.6 (2023-03-09)

cyberark/conjur-cli-go

v8.0.5 (2023-03-24)

v8.0.6 (2023-04-17)

v8.0.7 (2023-04-18)

v8.0.8 (2023-04-19)

v8.0.9 (2023-04-21)

cyberark/conjur-service-broker

v1.2.9 (2023-04-10)

  • Security
    • Update rack in Gemfile.lock and tests/integration/test-app/Gemfile.lock to 2.2.6.4 to address CVE-2023-27539,
      and activesupport in Gemfile.lock and tests/integration/test-app/Gemfile.lock to 6.1.7.3 for CVE-2023-28120 (not vulnerable)
      cyberark/conjur-service-broker#323
    • Update rack in Gemfile.lock and tests/integration/test-app/Gemfile.lock to 2.2.6...
Read more

v1.19.2+suite.1

06 Apr 15:10
v1.19.2+suite.1
7f63854
Compare
Choose a tag to compare

Release Notes

All notable changes to this project will be documented in this file.

[v1.19.2+suite.1] - 2023-03-03

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.19.2.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.19.2
    
  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
      --set image.tag="1.19.2" \
      ...
      https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.5/conjur-oss-2.0.5.tgz
    

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.19.1 (2022-12-08)

v1.19.2 (2023-01-13)

  • Fixed
    • Previously, including limit or offset parameters to a resource list request
      resulted in the returned list being unexpectedly sorted. Now, all resource list
      request results are sorted by resource ID.
      cyberark/conjur#2702
  • Security

cyberark/conjur-cli-go

v8.0.4 (2023-03-03)

cyberark/conjur-api-go

v0.11.0 (2023-02-28)

cyberark/conjur-api-java

[v3.0.4](https://github.com/cyberark/conjur-a...

Read more

v1.19.0+suite.1

01 Dec 15:06
v1.19.0+suite.1
f9590d3
Compare
Choose a tag to compare

Release Notes

All notable changes to this project will be documented in this file.

[v1.19.0+suite.1] - 2022-11-30

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.19.0.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.19.0
    
  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
      --set image.tag="1.19.0" \
      ...
      https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.5/conjur-oss-2.0.5.tgz
    

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.19.0 (2022-11-29)

  • Added
    • Conjur policy loads can now emit callbacks to extensions on policy
      load lifecycle events (e.g. before/after policy load). This is disabled
      by default, but is available under the
      CONJUR_FEATURE_POLICY_LOAD_EXTENSIONS feature flag.
      cyberark/conjur#2671
    • Conjur roles API can now emit callbacks to extensions on member add and
      remove events (e.g. before/after add member). This is disabled by default,
      but is available under the CONJUR_FEATURE_ROLES_API_EXTENSIONS feature flag.
      cyberark/conjur#2671
  • Security

cyberark/conjur-api-go

v0.10.2 (2022-11-14)

cyberark/cloudfoundry-conjur-buildpack

v2.2.6 (2022-11-23)

cyberark/conjur-service-broker

v1.2.7 (2022-11-27)

cyberark/conjur-authn-k8s-client

v0.24.0 (2022-11-23)

cyberark/secrets-provider-for-k8s

v1.4.5 (2022-09-26)

cyberark/terraform-provider-conjur

v0.6.4 (2022-11-14)

Read more

v1.18.4+suite.1

03 Oct 20:11
v1.18.4+suite.1
967516a
Compare
Choose a tag to compare

Release Notes

All notable changes to this project will be documented in this file.

[v1.18.4+suite.1] - 2022-10-03

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.18.4.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.18.4
    
  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
      --set image.tag="1.18.4" \
      ...
      https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.5/conjur-oss-2.0.5.tgz
    

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.18.1 (2022-08-01)

  • Changed
    • Migrates OIDC Provider list to be accessable via an unauthentated
      endpoint. This is not a concern as logins using this endpoint already
      display the redirect endpoint on the login page.
      cyberark/conjur#2625

v1.18.2 (2022-09-01)

v1.18.3 (2022-09-07)

v1.18.4 (2022-09-11)

cyberark/conjur-authn-k8s-client

v0.23.8 (2022-08-31)

cyberark/ansible-conjur-collection

v1.2.0 (2020-09-01)

v1.18.0+suite.1

15 Sep 13:02
bcdf095
Compare
Choose a tag to compare

Release Notes

All notable changes to this project will be documented in this file.

[v1.18.0+suite.1] - 2022-08-24

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.18.0.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.18.0
    
  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
      --set image.tag="1.18.0" \
      ...
      https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.5/conjur-oss-2.0.5.tgz
    

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.17.7 (2022-06-29)

  • Changed
  • Fixed
    • Previously, the temporary schemas used to modify Conjur policy
      caused the Postgres database catalog cache to leak memory over time,
      leading to an eventual crash. Now, we recycle the database
      connection after modifying policy to free this cache and prevent
      the memory leak from occurring.
      cyberark/conjur#2584
  • Security

v1.18.0 (2022-08-01)

cyberark/conjur-oss-helm-chart

v2.0.5 (2022-08-17)

cyberark/conjur-cli

v6.2.6 (2022-01-31)

v6.2.7 (2022-05-09)

v6.2.8 (2022-08-16)

cyberark/conjur-api-ruby

v5.4.0 (2022-08-16)

cyberark/conjur-service-broker

v1.2.6 (2022-08-16)

cyberark/conjur-authn-k8s-client

v0.23.7 (2022-07-12)

  • Changed
    • Updated dev/Dockerfile.debug and removed bin/test-workflow/test-app-summon/Dockerfile.builder
      and bin/test-workflow/test-app-summon/Dockerfile.oc
      cyberark/conjur-authn-k8s-client#480

cyberark/secrets-provider-for-k8s

##...

Read more

v1.17.6+suite.1

04 Aug 17:58
v1.17.6+suite.1
dbbecd6
Compare
Choose a tag to compare

Release Notes

All notable changes to this project will be documented in this file.

[v1.17.6+suite.1] - 2022-07-12

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.17.6.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.17.6
    
  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
      --set image.tag="1.17.6" \
      ...
      https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.4/conjur-oss-2.0.4.tgz
    

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.17.3 (2022-04-04)

  • Added
    • Added the ability to fetch signing keys from JWKS endpoints that use a self-signed
      certificate or a certificate signed by a third-party CA for JWT generic vendor
      configuration
      (#2462
      #2461
      #2456
      #2455
      #2457
      #2452
      #2437)
    • Added the ability for JWT generic vendor configuration to receive signing keys
      for JWT token verification from a variable. Variable name is public-keys
      (#2463
      #2461
      #2456
      #2455
      #2454
      #2450
      #2447
      #2437)
    • Added support for SNI certificates when talking to the Kubernetes API
      server through the web socket client.
      #2482
    • Added support for http(s)_proxy for Kubernetes client in Kubernetes
      authenticator
      #2432
  • Changed
    • Fixed issue where an invalid content type sent by our .NET SDK was causing
      Conjur to error - but this wasn't the case before the Ruby 3 upgrade
      #2525
    • Verify non user or host resources do not have credentials.
    • Update to automated release process
    • Proper error message appears when JWT Authenticator gets HTTP code error
      while trying to fetch JWKS data from jwks-uri #2474
    • Upgrade to Ruby 3. #2444
  • Fixed
    • IAM Authn bug fix - Take rexml gem to production configuration #2493
    • Previously, a stale puma pid file would prevent the Conjur server from starting
      successfully. Conjur now removes a stale pid file at startup, if it exists.
      #2498
    • Use entirety of configured Kubernetes endpoint URL in Kubernetes authenticator's
      web socket client, instead of only host and port
      #2479
  • Security

v1.17.6 (2022-04-07)

cyberark/conjur-openapi-spec

v5.3.0 (2021-12-22)

cyberark/conjur-api-dotnet

v2.1.1 (2022-03-14)

  • Fixed
    • Fix mime type "te...
Read more

v1.15.0+suite.1

31 Jan 14:42
v1.15.0+suite.1
3f072ba
Compare
Choose a tag to compare

Release Notes

All notable changes to this project will be documented in this file.

[v1.15.0+suite.1] - 2022-01-24

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.15.0.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.15.0
    
  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
      --set image.tag="1.15.0" \
      ...
      https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.4/conjur-oss-2.0.4.tgz
    

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.14.2 (2021-12-13)

  • Changed
    • Failed Login now writes the error code in the log
      #2424
    • Bump cyberark base images from 1.0.5 to 1.0.6
      #2420
    • Bump cyberark base images from 1.0.4 to 1.0.5
      #2418
  • Fixed
    • Return 401 instead of 500 for invalid basic auth header.
      #1990
    • Added check to stop hosts from setting passwords
      #1920
  • Security
    • Bump gems related to openid_connect stack for improving the certificate
      validation procedure during the OIDC keys discovery process
      #2441

v1.15.0 (2021-12-21)

  • Added
    • Added API endpoint to enable and disable GCP authenticator
      #2448
  • Fixed
    • Check to stop hosts from setting passwords fixed for admin user
      #2440

cyberark/conjur-api-python3

v7.1.0 (2021-12-22)

  • Added
    • Init command is now strict to run in one of three modes described in SslVerificationMode enum
    • For CLI Init flow, Additional certificate validation steps where added. for --self-signed and --ca-cert flows
    • Support http domains if working in insecure mode
    • The hostfactory method create token is now available in CLI and SDK to create a hostfactory token to manage hosts
      and permissions in a dynamic way
      cyberark/conjur-api-python3#339
    • Stop supporting Client initialization from disk.
    • The list options --members-of, --permitted-roles, and --privilege are now available in the Conjur CLI
  • Fixed
    • Fixed Load policy "hides" the error message

cyberark/conjur-service-broker

v1.2.2 (2021-11-03)

v1.2.3 (2021-12-31)

cyberark/secrets-provider-for-k8s

v1.2.0 (2021-11-30)

v1.3.0 (2022-01-03)

Read more

v1.14.1+suite.1

16 Nov 15:19
v1.14.1+suite.1
fecd740
Compare
Choose a tag to compare

Release Notes

All notable changes to this project will be documented in this file.

[v1.14.1+suite.1] - 2021-11-15

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.14.1.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.14.1
    
  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
      --set image.tag="1.14.1" \
      ...
      https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.4/conjur-oss-2.0.4.tgz
    

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.13.2 (2021-10-13)

v1.14.1 (2021-11-05)

  • Fixed
    • Version bump to resolve build error on tagged master. #2416

cyberark/conjur-cli

v6.2.5 (2021-09-29)

cyberark/secrets-provider-for-k8s

v1.1.6 (2021-10-29)

cyberark/secretless-broker

v1.7.8 (2021-11-09)

v1.13.1+suite.1

24 Sep 13:34
v1.13.1+suite.1
d1c3721
Compare
Choose a tag to compare

Release Notes

All notable changes to this project will be documented in this file.

[v1.13.1+suite.1] - 2021-09-20

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.13.1.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.13.1
    
  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
      --set image.tag="1.13.1" \
      ...
      https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.4/conjur-oss-2.0.4.tgz
    

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.13.1 (2021-09-13)

  • Changed
    • OIDC based authenticators no longer return Bad Gateway and Gateway Timeout http error codes.
      Unauthorised is returned instead.
      cyberark/conjur#2360
  • Fixed

cyberark/conjur-openapi-spec

v5.2.0 (2021-09-08)

  • Added
  • Changed
  • Fixed
    • Request body details for secret creation so all clients can properly set secrets. This changes
      the MIME type of the request body to application/octet-stream in place of text plain,
      allowing for proper binary secrets in clients (format: binary is broken in some clients).
      cyberark/conjur-openapi-spec#187
    • Authentication methods not requiring any API authentication (conjurAuth, basicAuth, etc) now
      specify an empty list as the security field ensuring utilities dont assume all authentication
      types are valid.
      cyberark/conjur-openapi-spec#196

cyberark/conjur-api-dotnet

v2.1.0 (2021-09-08)

  • Added
    • Add parameter to the function Policy::LoadPolicy() to allow a different load method other than POST. POST being the default value. Currently Conjur supports POST, PUT and PATCH

cyberark/conjur-api-go

v0.8.0 (2021-09-10)

cyberark/conjur-authn-k8s-client

v0.22.0 (2021-09-17)

cyberark/secrets-provider-for-k8s

v1.1.5 (2021-08-13)

  • Added
    • Adds Helm chart option to use an independently installed Conjur Connect
      ConfigMap instead of configuring Conjur connection parameters via environment
      variables.
      cyberark/secrets-provider-for-k8s#349
    • Adds Helm chart option to explicitly set the Secrets Provider Job name.
      [cyberark/secrets-provide...
Read more