Skip to content

v1.17.6+suite.1
Compare
Choose a tag to compare
@github-actions github-actions released this 04 Aug 17:58
v1.17.6+suite.1
This tag was signed with the committer’s verified signature.
jtuttle John Tuttle
GPG key ID: E223AA1BC63309AE
Learn about vigilant mode.
dbbecd6
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Release Notes

All notable changes to this project will be documented in this file.

[v1.17.6+suite.1] - 2022-07-12

Table of Contents

Components

These are the components that combine to create this Conjur OSS Suite release and links
to their releases:

Conjur Server

Conjur SDK

Platform Integrations

DevOps Tools

Secretless Broker

Summon

Installation Instructions for the Suite Release Version of Conjur

Installing the Suite Release Version of Conjur requires setting the container image tag. Below are more specific instructions depending on environment.

  • Docker or docker-compose

    Set the container image tag to cyberark/conjur:1.17.6.
    For example, make the following update to the conjur service in the quickstart docker-compose.yml

    image: cyberark/conjur:1.17.6

  • Conjur Open Source Helm chart

    Update the image.tag value and use the appropriate release of the helm chart:

    helm install ... \
  --set image.tag="1.17.6" \
  ...
  https://github.com/cyberark/conjur-oss-helm-chart/releases/download/v2.0.4/conjur-oss-2.0.4.tgz

Upgrade Instructions

Upgrade instructions are available for the following components:

Changes

The following are changes to the constituent components since the last Conjur
OSS Suite release:

cyberark/conjur

v1.17.3 (2022-04-04)

  • Added
    • Added the ability to fetch signing keys from JWKS endpoints that use a self-signed
      certificate or a certificate signed by a third-party CA for JWT generic vendor
      configuration
      (#2462
      #2461
      #2456
      #2455
      #2457
      #2452
      #2437)
    • Added the ability for JWT generic vendor configuration to receive signing keys
      for JWT token verification from a variable. Variable name is public-keys
      (#2463
      #2461
      #2456
      #2455
      #2454
      #2450
      #2447
      #2437)
    • Added support for SNI certificates when talking to the Kubernetes API
      server through the web socket client.
      #2482
    • Added support for http(s)_proxy for Kubernetes client in Kubernetes
      authenticator
      #2432
  • Changed
    • Fixed issue where an invalid content type sent by our .NET SDK was causing
      Conjur to error - but this wasn't the case before the Ruby 3 upgrade
      #2525
    • Verify non user or host resources do not have credentials.
    • Update to automated release process
    • Proper error message appears when JWT Authenticator gets HTTP code error
      while trying to fetch JWKS data from jwks-uri #2474
    • Upgrade to Ruby 3. #2444
  • Fixed
    • IAM Authn bug fix - Take rexml gem to production configuration #2493
    • Previously, a stale puma pid file would prevent the Conjur server from starting
      successfully. Conjur now removes a stale pid file at startup, if it exists.
      #2498
    • Use entirety of configured Kubernetes endpoint URL in Kubernetes authenticator's
      web socket client, instead of only host and port
      #2479
  • Security

v1.17.6 (2022-04-07)

cyberark/conjur-openapi-spec

v5.3.0 (2021-12-22)

cyberark/conjur-api-dotnet

v2.1.1 (2022-03-14)

cyberark/conjur-api-go

v0.8.1 (2021-12-16)

v0.9.0 (2022-02-20)

v0.10.0 (2022-05-19)

v0.10.1 (2022-06-14)

cyberark/conjur-api-java

v3.0.3 (2022-05-31)

cyberark/conjur-api-ruby

v5.3.6 (2021-12-09)

v5.3.7 (2021-12-28)

cyberark/cloudfoundry-conjur-buildpack

v2.2.2 (2022-01-03)

v2.2.3 (2022-06-07)

v2.2.4 (2022-06-16)

cyberark/conjur-service-broker

v1.2.4 (2022-05-05)

v1.2.5 (2022-06-16)

cyberark/conjur-authn-k8s-client

v0.23.0 (2022-01-14)

v0.23.1 (2022-02-11)

v0.23.3 (2022-05-19)

v0.23.5 (2022-06-14)

v0.23.6 (2022-06-16)

cyberark/secrets-provider-for-k8s

v1.4.0 (2022-02-15)

v1.4.1 (2022-04-01)

v1.4.3 (2022-07-07)

cyberark/secretless-broker

v1.7.9 (2022-01-14)

v1.7.10 (2022-02-15)

v1.7.11 (2022-04-29)

v1.7.12 (2022-05-02)

v1.7.13 (2022-07-07)

  • Changed
    • Updated direct dependencies in bin/juxtaposer/go.mod and in go.mod and add replace statements
      for known vulnerable third-party versions.
      cyberark/secretless-broker#1467

cyberark/summon

v0.9.1 (2021-12-22)

  • Changed
    • Update go to 1.17 & switch to github.com/urfave/cli
      from github.com/codegangsta/cli
      cyberark/summon#226

v0.9.2 (2022-05-31)

v0.9.3 (2022-06-15)

  • Changed
    • Updated dependencies in go.mod (github.com/stretchr/testify -> 1.7.2,
      github.com/urfave/cli -> 1.22.9, golang.org/x/net -> v0.0.0-20220607020251-c690dde0001d,
      gopkg.in/yaml.v3 -> v3.0.1)
      cyberark/summon#234

cyberark/summon-conjur

v0.6.1 (2021-12-31)

v0.6.2 (2022-02-25)

v0.6.3 (2022-05-19)

v0.6.4 (2022-07-06)

  • Changed
    • Updated direct dependencies (github.com/cyberark/conjur-api-go -> v0.10.1,
      github.com/stretchr/testify -> 1.7.2)
      cyberark/summon-conjur#106
Assets 6
Loading