summaryrefslogtreecommitdiffstats
path: root/ansible_collections/community/hashi_vault/changelogs/changelog.yaml
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-13 12:04:41 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-13 12:04:41 +0000
commit975f66f2eebe9dadba04f275774d4ab83f74cf25 (patch)
tree89bd26a93aaae6a25749145b7e4bca4a1e75b2be /ansible_collections/community/hashi_vault/changelogs/changelog.yaml
parentInitial commit. (diff)
downloadansible-975f66f2eebe9dadba04f275774d4ab83f74cf25.tar.xz
ansible-975f66f2eebe9dadba04f275774d4ab83f74cf25.zip
Adding upstream version 7.7.0+dfsg.upstream/7.7.0+dfsg
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'ansible_collections/community/hashi_vault/changelogs/changelog.yaml')
-rw-r--r--ansible_collections/community/hashi_vault/changelogs/changelog.yaml646
1 files changed, 646 insertions, 0 deletions
diff --git a/ansible_collections/community/hashi_vault/changelogs/changelog.yaml b/ansible_collections/community/hashi_vault/changelogs/changelog.yaml
new file mode 100644
index 000000000..cd982ec0e
--- /dev/null
+++ b/ansible_collections/community/hashi_vault/changelogs/changelog.yaml
@@ -0,0 +1,646 @@
+ancestor: null
+releases:
+ 0.1.0:
+ changes:
+ release_summary: 'Our first release matches the ``hashi_vault`` lookup functionality
+ provided by ``community.general`` version ``1.3.0``.
+
+ '
+ fragments:
+ - 0.1.0.yml
+ release_date: '2020-12-02'
+ 0.2.0:
+ changes:
+ bugfixes:
+ - hashi_vault - ``mount_point`` parameter did not work with ``aws_iam_login``
+ auth method (https://github.com/ansible-collections/community.hashi_vault/issues/7)
+ - hashi_vault - fallback logic for handling deprecated style of auth in hvac
+ was not implemented correctly (https://github.com/ansible-collections/community.hashi_vault/pull/33).
+ - hashi_vault - parameter ``mount_point`` does not work with JWT auth (https://github.com/ansible-collections/community.hashi_vault/issues/29).
+ - hashi_vault - tokens without ``lookup-self`` ability can't be used because
+ of validation (https://github.com/ansible-collections/community.hashi_vault/issues/18).
+ deprecated_features:
+ - hashi_vault - ``VAULT_ADDR`` environment variable for option ``url`` will
+ have its precedence lowered in 1.0.0; use ``ANSIBLE_HASHI_VAULT_ADDR`` to
+ intentionally override a config value (https://github.com/ansible-collections/community.hashi_vault/issues/8).
+ - hashi_vault - ``VAULT_AUTH_METHOD`` environment variable for option ``auth_method``
+ will be removed in 2.0.0, use ``ANSIBLE_HASHI_VAULT_AUTH_METHOD`` instead
+ (https://github.com/ansible-collections/community.hashi_vault/issues/17).
+ - hashi_vault - ``VAULT_ROLE_ID`` environment variable for option ``role_id``
+ will be removed in 2.0.0, use ``ANSIBLE_HASHI_VAULT_ROLE_ID`` instead (https://github.com/ansible-collections/community.hashi_vault/issues/20).
+ - hashi_vault - ``VAULT_SECRET_ID`` environment variable for option ``secret_id``
+ will be removed in 2.0.0, use ``ANSIBLE_HASHI_VAULT_SECRET_ID`` instead (https://github.com/ansible-collections/community.hashi_vault/issues/20).
+ - hashi_vault - ``VAULT_TOKEN_FILE`` environment variable for option ``token_file``
+ will be removed in 2.0.0, use ``ANSIBLE_HASHI_VAULT_TOKEN_FILE`` instead (https://github.com/ansible-collections/community.hashi_vault/issues/15).
+ - hashi_vault - ``VAULT_TOKEN_PATH`` environment variable for option ``token_path``
+ will be removed in 2.0.0, use ``ANSIBLE_HASHI_VAULT_TOKEN_PATH`` instead (https://github.com/ansible-collections/community.hashi_vault/issues/15).
+ minor_changes:
+ - Add optional ``aws_iam_server_id`` parameter as the value for ``X-Vault-AWS-IAM-Server-ID``
+ header (https://github.com/ansible-collections/community.hashi_vault/pull/27).
+ - hashi_vault - ``ANSIBLE_HASHI_VAULT_ADDR`` environment variable added for
+ option ``url`` (https://github.com/ansible-collections/community.hashi_vault/issues/8).
+ - hashi_vault - ``ANSIBLE_HASHI_VAULT_AUTH_METHOD`` environment variable added
+ for option ``auth_method`` (https://github.com/ansible-collections/community.hashi_vault/issues/17).
+ - hashi_vault - ``ANSIBLE_HASHI_VAULT_ROLE_ID`` environment variable added for
+ option ``role_id`` (https://github.com/ansible-collections/community.hashi_vault/issues/20).
+ - hashi_vault - ``ANSIBLE_HASHI_VAULT_SECRET_ID`` environment variable added
+ for option ``secret_id`` (https://github.com/ansible-collections/community.hashi_vault/issues/20).
+ - hashi_vault - ``ANSIBLE_HASHI_VAULT_TOKEN_FILE`` environment variable added
+ for option ``token_file`` (https://github.com/ansible-collections/community.hashi_vault/issues/15).
+ - hashi_vault - ``ANSIBLE_HASHI_VAULT_TOKEN_PATH`` environment variable added
+ for option ``token_path`` (https://github.com/ansible-collections/community.hashi_vault/issues/15).
+ - hashi_vault - ``namespace`` parameter can be specified in INI or via env vars
+ ``ANSIBLE_HASHI_VAULT_NAMESPACE`` (new) and ``VAULT_NAMESPACE`` (lower preference) (https://github.com/ansible-collections/community.hashi_vault/issues/14).
+ - hashi_vault - ``token`` parameter can now be specified via ``ANSIBLE_HASHI_VAULT_TOKEN``
+ as well as via ``VAULT_TOKEN`` (the latter with lower preference) (https://github.com/ansible-collections/community.hashi_vault/issues/16).
+ - hashi_vault - add ``token_validate`` option to control token validation (https://github.com/ansible-collections/community.hashi_vault/pull/24).
+ - hashi_vault - uses new AppRole method in hvac 0.10.6 with fallback to deprecated
+ method with warning (https://github.com/ansible-collections/community.hashi_vault/pull/33).
+ release_summary: 'Several backwards-compatible bugfixes and enhancements in
+ this release.
+
+ Some environment variables are deprecated and have standardized replacements.'
+ fragments:
+ - 0.2.0.yml
+ - 22-hashi_vault-aws_iam_login-mount_point.yml
+ - 24-hashi_vault-token_validation.yml
+ - 25-non-breaking-env-parameter-changes.yml
+ - 27-add-hashi_vault-header_value-param.yml
+ - 31-jwt-mount_point.yml
+ - 33-approle-deprecation.yml
+ - 35-env-var-deprecations.yml
+ release_date: '2020-12-24'
+ 1.0.0:
+ changes:
+ breaking_changes:
+ - hashi_vault - the ``VAULT_ADDR`` environment variable is now checked last
+ for the ``url`` parameter. For details on which use cases are impacted, see
+ (https://github.com/ansible-collections/community.hashi_vault/issues/8).
+ release_summary: Our first major release contains a single breaking change that
+ will affect only a small subset of users. No functionality is removed. See
+ the details in the changelog to determine if you're affected and if so how
+ to transition to remediate.
+ fragments:
+ - 1.0.0.yml
+ - 41-lower-url-env-precedence.yml
+ release_date: '2020-12-30'
+ 1.1.0:
+ changes:
+ minor_changes:
+ - hashi_vault - add ``proxies`` option (https://github.com/ansible-collections/community.hashi_vault/pull/50).
+ release_summary: This release contains a new ``proxies`` option for the ``hashi_vault``
+ lookup.
+ fragments:
+ - 1.1.0.yml
+ - 50-add-proxies-option.yml
+ release_date: '2021-02-08'
+ 1.1.1:
+ changes:
+ bugfixes:
+ - hashi_vault - restore use of ``VAULT_ADDR`` environment variable as a low
+ preference env var (https://github.com/ansible-collections/community.hashi_vault/pull/61).
+ release_summary: 'This bugfix release restores the use of the ``VAULT_ADDR``
+ environment variable for setting the ``url`` option.
+
+ See the PR linked from the changelog entry for details and workarounds if
+ you cannot upgrade.'
+ fragments:
+ - 1.1.1.yml
+ - 41-fix-vault-addr.yml
+ release_date: '2021-02-24'
+ 1.1.2:
+ changes:
+ release_summary: This release contains the same functionality as 1.1.1. The
+ only change is to mark some code as internal to the collection. If you are
+ already using 1.1.1 as an end user you do not need to update.
+ fragments:
+ - 1.1.2.yml
+ release_date: '2021-03-02'
+ 1.1.3:
+ changes:
+ bugfixes:
+ - hashi_vault - userpass authentication did not work with hvac 0.9.6 or higher
+ (https://github.com/ansible-collections/community.hashi_vault/pull/68).
+ release_summary: This release fixes a bug with ``userpass`` authentication and
+ ``hvac`` versions 0.9.6 and higher.
+ fragments:
+ - 1.1.3.yml
+ - 68-fix-userpass-auth.yml
+ release_date: '2021-03-19'
+ 1.2.0:
+ changes:
+ deprecated_features:
+ - hashi_vault collection - support for Python 2 will be dropped in version ``2.0.0``
+ of ``community.hashi_vault`` (https://github.com/ansible-collections/community.hashi_vault/issues/81).
+ minor_changes:
+ - hashi_vault lookup - add ``ANSIBLE_HASHI_VAULT_CA_CERT`` env var (with ``VAULT_CACERT``
+ low-precedence fallback) for ``ca_cert`` option (https://github.com/ansible-collections/community.hashi_vault/pull/97).
+ - hashi_vault lookup - add ``ANSIBLE_HASHI_VAULT_PASSWORD`` env var and ``ansible_hashi_vault_password``
+ ansible var for ``password`` option (https://github.com/ansible-collections/community.hashi_vault/pull/96).
+ - hashi_vault lookup - add ``ANSIBLE_HASHI_VAULT_USERNAME`` env var and ``ansible_hashi_vault_username``
+ ansible var for ``username`` option (https://github.com/ansible-collections/community.hashi_vault/pull/96).
+ - hashi_vault lookup - add ``ansible_hashi_vault_auth_method`` Ansible vars
+ entry to the ``proxies`` option (https://github.com/ansible-collections/community.hashi_vault/pull/86).
+ - hashi_vault lookup - add ``ansible_hashi_vault_ca_cert`` ansible var for ``ca_cert``
+ option (https://github.com/ansible-collections/community.hashi_vault/pull/97).
+ - hashi_vault lookup - add ``ansible_hashi_vault_namespace`` Ansible vars entry
+ to the ``namespace`` option (https://github.com/ansible-collections/community.hashi_vault/pull/86).
+ - hashi_vault lookup - add ``ansible_hashi_vault_proxies`` Ansible vars entry
+ to the ``proxies`` option (https://github.com/ansible-collections/community.hashi_vault/pull/86).
+ - hashi_vault lookup - add ``ansible_hashi_vault_role_id`` Ansible vars entry
+ to the ``proxies`` option (https://github.com/ansible-collections/community.hashi_vault/pull/86).
+ - hashi_vault lookup - add ``ansible_hashi_vault_secret_id`` Ansible vars entry
+ to the ``proxies`` option (https://github.com/ansible-collections/community.hashi_vault/pull/86).
+ - hashi_vault lookup - add ``ansible_hashi_vault_token_file`` Ansible vars entry
+ to the ``token_file`` option (https://github.com/ansible-collections/community.hashi_vault/pull/95).
+ - hashi_vault lookup - add ``ansible_hashi_vault_token_path`` Ansible vars entry
+ to the ``token_path`` option (https://github.com/ansible-collections/community.hashi_vault/pull/95).
+ - hashi_vault lookup - add ``ansible_hashi_vault_token_validate`` Ansible vars
+ entry to the ``proxies`` option (https://github.com/ansible-collections/community.hashi_vault/pull/86).
+ - hashi_vault lookup - add ``ansible_hashi_vault_token`` Ansible vars entry
+ to the ``proxies`` option (https://github.com/ansible-collections/community.hashi_vault/pull/86).
+ - hashi_vault lookup - add ``ansible_hashi_vault_url`` and ``ansible_hashi_vault_addr``
+ Ansible vars entries to the ``url`` option (https://github.com/ansible-collections/community.hashi_vault/pull/86).
+ - hashi_vault lookup - add ``ansible_hashi_vault_validate_certs`` Ansible vars
+ entry to the ``validate_certs`` option (https://github.com/ansible-collections/community.hashi_vault/pull/95).
+ - hashi_vault lookup - add ``ca_cert`` INI config file key ``ca_cert`` option
+ (https://github.com/ansible-collections/community.hashi_vault/pull/97).
+ - hashi_vault lookup - add ``none`` auth type which allows for passive auth
+ via a Vault agent (https://github.com/ansible-collections/community.hashi_vault/pull/80).
+ release_summary: 'This release brings several new ways of accessing options,
+ like using Ansible vars, and addng new environment variables and INI config
+ entries.
+
+ A special ``none`` auth type is also added, for working with certain Vault
+ Agent configurations.
+
+ This release also announces the deprecation of Python 2 support in version
+ ``2.0.0`` of the collection.'
+ fragments:
+ - 1.2.0.yml
+ - 80-add-none-auth-type.yml
+ - 81-deprecating-python2.yml
+ - 86-add-vars-options.yml
+ - 95-more-vars-options.yml
+ - 96-userpass-vars-env.yml
+ - 97-ca_cert-env-and-vars.yml
+ release_date: '2021-06-19'
+ 1.3.0:
+ changes:
+ minor_changes:
+ - hashi_vault lookup - add ``retries`` and ``retry_action`` to enable built-in
+ retry on failure (https://github.com/ansible-collections/community.hashi_vault/pull/71).
+ - hashi_vault lookup - add ``timeout`` option to control connection timeouts
+ (https://github.com/ansible-collections/community.hashi_vault/pull/100).
+ release_summary: This release adds two connection-based options for controlling
+ timeouts and retrying failed Vault requests.
+ fragments:
+ - 1.3.0.yml
+ - 100-add-timeout-option.yml
+ - 71-add-retries.yml
+ release_date: '2021-06-28'
+ 1.3.1:
+ changes:
+ release_summary: This release fixes an error in the documentation. No functionality
+ is changed so it's not necessary to upgrade from ``1.3.0``.
+ fragments:
+ - 1.3.1.yml
+ release_date: '2021-06-30'
+ 1.3.2:
+ changes:
+ deprecated_features:
+ - hashi_vault collection - support for Python 3.5 will be dropped in version
+ ``2.0.0`` of ``community.hashi_vault`` (https://github.com/ansible-collections/community.hashi_vault/issues/81).
+ minor_changes:
+ - hashi_vault collection - add ``execution-environment.yml`` and a python requirements
+ file to better support ``ansible-builder`` (https://github.com/ansible-collections/community.hashi_vault/pull/105).
+ release_summary: 'This release adds requirements detection support for Ansible
+ Execution Environments. It also updates and adds new guides in our `collection
+ docsite <https://docs.ansible.com/ansible/devel/collections/community/hashi_vault>`_.
+
+ This release also announces the dropping of Python 3.5 support in version
+ ``2.0.0`` of the collection, alongside the previous announcement dropping
+ Python 2.x in ``2.0.0``.'
+ fragments:
+ - 1.3.2.yml
+ - 105-support-ansible-builder.yml
+ - 107-deprecating-python-35.yml
+ release_date: '2021-07-20'
+ 1.4.0:
+ changes:
+ bugfixes:
+ - aws_iam_login auth - the ``aws_security_token`` option was not used, causing
+ assumed role credentials to fail (https://github.com/ansible-collections/community.hashi_vault/issues/160).
+ - hashi_vault collection - a fallback import supporting the ``retries`` option
+ for ``urllib3`` via ``requests.packages.urllib3`` was not correctly formed
+ (https://github.com/ansible-collections/community.hashi_vault/issues/116).
+ - hashi_vault collection - unhandled exception with ``token`` auth when ``token_file``
+ exists but is a directory (https://github.com/ansible-collections/community.hashi_vault/issues/152).
+ deprecated_features:
+ - lookup hashi_vault - the ``[lookup_hashi_vault]`` section in the ``ansible.cfg``
+ file is deprecated and will be removed in collection version ``3.0.0``. Instead,
+ the section ``[hashi_vault_collection]`` can be used, which will apply to
+ all plugins in the collection going forward (https://github.com/ansible-collections/community.hashi_vault/pull/144).
+ minor_changes:
+ - community.hashi_vault collection - add cert auth method (https://github.com/ansible-collections/community.hashi_vault/pull/159).
+ release_summary: 'This release includes bugfixes, a new auth method (``cert``),
+ and the first new content since the collection''s formation, the ``vault_read``
+ module and lookup plugin.
+
+ We''re also announcing the deprecation of the ``[lookup_hashi_vault]`` INI
+ section (which will continue working up until its removal only for the ``hashi_vault``
+ lookup), to be replaced by the ``[hashi_vault_collection]`` section that will
+ apply to all plugins in the collection.'
+ fragments:
+ - 1.4.0.yml
+ - 113-retry-fallback.yml
+ - 144-deprecate-lookup-ini.yml
+ - 154-token_file must be a file.yml
+ - 159-add-cert-auth.yml
+ - 161-aws-sts-token.yml
+ modules:
+ - description: Perform a read operation against HashiCorp Vault
+ name: vault_read
+ namespace: ''
+ plugins:
+ lookup:
+ - description: Perform a read operation against HashiCorp Vault
+ name: vault_read
+ namespace: null
+ release_date: '2021-10-25'
+ 1.4.1:
+ changes:
+ bugfixes:
+ - aws_iam_login auth method - fix incorrect use of ``boto3``/``botocore`` that
+ prevented proper loading of AWS IAM role credentials (https://github.com/ansible-collections/community.hashi_vault/issues/167).
+ release_summary: This release contains a bugfix for ``aws_iam_login`` authentication.
+ fragments:
+ - 1.4.1.yml
+ - 168-aws_auth-boto-bug.yml
+ release_date: '2021-10-28'
+ 1.5.0:
+ changes:
+ minor_changes:
+ - add the ``community.hashi_vault.vault`` action group (https://github.com/ansible-collections/community.hashi_vault/pull/172).
+ - auth methods - Add support for configuring the ``mount_point`` auth method
+ option in plugins via the ``ANSIBLE_HASHI_VAULT_MOUNT_POINT`` environment
+ variable, ``ansible_hashi_vault_mount_point`` ansible variable, or ``mount_point``
+ INI section (https://github.com/ansible-collections/community.hashi_vault/pull/171).
+ release_summary: 'This release includes a new action group for use with ``module_defaults``,
+ and additional ways of specifying the ``mount_point`` option for plugins.
+
+ This will be the last ``1.x`` release.'
+ fragments:
+ - 1.5.0.yml
+ - 172-action_group.yml
+ - pr-171-envvar-for-mount-point.yaml
+ release_date: '2021-11-05'
+ 2.0.0:
+ changes:
+ breaking_changes:
+ - connection options - there is no longer a default value for the ``url`` option
+ (the Vault address), so a value must be supplied (https://github.com/ansible-collections/community.hashi_vault/issues/83).
+ release_summary: 'Version 2.0.0 of the collection drops support for Python 2
+ & Python 3.5, making Python 3.6 the minimum supported version.
+
+ Some deprecated features and settings have been removed as well.'
+ removed_features:
+ - drop support for Python 2 and Python 3.5 (https://github.com/ansible-collections/community.hashi_vault/issues/81).
+ - 'support for the following deprecated environment variables has been removed:
+ ``VAULT_AUTH_METHOD``, ``VAULT_TOKEN_PATH``, ``VAULT_TOKEN_FILE``, ``VAULT_ROLE_ID``,
+ ``VAULT_SECRET_ID`` (https://github.com/ansible-collections/community.hashi_vault/pull/173).'
+ fragments:
+ - 173-deprecated-env-vars.yml
+ - 176-url-is-required.yml
+ - 177-drop-py2-3.5.yml
+ - 2.0.0.yml
+ release_date: '2021-11-06'
+ 2.1.0:
+ changes:
+ deprecated_features:
+ - Support for Ansible 2.9 and ansible-base 2.10 is deprecated, and will be removed
+ in the next major release (community.hashi_vault 3.0.0) next spring (https://github.com/ansible-community/community-topics/issues/50,
+ https://github.com/ansible-collections/community.hashi_vault/issues/189).
+ - aws_iam_login auth method - the ``aws_iam_login`` method has been renamed
+ to ``aws_iam``. The old name will be removed in collection version ``3.0.0``.
+ Until then both names will work, and a warning will be displayed when using
+ the old name (https://github.com/ansible-collections/community.hashi_vault/pull/193).
+ release_summary: The most important change in this release is renaming the ``aws_iam_login``
+ auth method to ``aws_iam`` and deprecating the old name. This release also
+ announces the deprecation of Ansible 2.9 and ansible-base 2.10 support in
+ 3.0.0.
+ removed_features:
+ - the "legacy" integration test setup has been removed; this does not affect
+ end users and is only relevant to contributors (https://github.com/ansible-collections/community.hashi_vault/pull/191).
+ fragments:
+ - 190-deprecate-ansible-2.9-2.10.yml
+ - 191-remove-legacy-integration.yml
+ - 193-rename-aws-iam-auth.yml
+ - 2.1.0.yml
+ release_date: '2021-12-03'
+ 2.2.0:
+ changes:
+ minor_changes:
+ - The Filter guide has been added to the collection's docsite.
+ release_summary: This release contains a new lookup/module combo for logging
+ in to Vault, and includes our first filter plugin.
+ fragments:
+ - 199-vault_login-vault_login_token.yml
+ - 2.2.0.yml
+ modules:
+ - description: Perform a login operation against HashiCorp Vault
+ name: vault_login
+ namespace: ''
+ plugins:
+ filter:
+ - description: Extracts the client token from a Vault login response
+ name: vault_login_token
+ namespace: null
+ lookup:
+ - description: Perform a login operation against HashiCorp Vault
+ name: vault_login
+ namespace: null
+ release_date: '2022-01-05'
+ 2.3.0:
+ changes:
+ release_summary: This release contains new plugins and modules for creating
+ tokens and for generating certificates with Vault's PKI secrets engine.
+ fragments:
+ - 2.3.0.yml
+ modules:
+ - description: Generates a new set of credentials (private key and certificate)
+ using HashiCorp Vault PKI
+ name: vault_pki_generate_certificate
+ namespace: ''
+ - description: Create a HashiCorp Vault token
+ name: vault_token_create
+ namespace: ''
+ plugins:
+ lookup:
+ - description: Create a HashiCorp Vault token
+ name: vault_token_create
+ namespace: null
+ release_date: '2022-02-15'
+ 2.4.0:
+ changes:
+ release_summary: Our first content for writing to Vault is now live.
+ fragments:
+ - 2.4.0.yml
+ modules:
+ - description: Perform a write operation against HashiCorp Vault
+ name: vault_write
+ namespace: ''
+ plugins:
+ lookup:
+ - description: Perform a write operation against HashiCorp Vault
+ name: vault_write
+ namespace: null
+ release_date: '2022-03-31'
+ 2.5.0:
+ changes:
+ deprecated_features:
+ - token_validate options - the shared auth option ``token_validate`` will change
+ its default from ``True`` to ``False`` in community.hashi_vault version 4.0.0.
+ The ``vault_login`` lookup and module will keep the default value of ``True``
+ (https://github.com/ansible-collections/community.hashi_vault/issues/248).
+ minor_changes:
+ - vault_login module & lookup - no friendly error message was given when ``hvac``
+ was missing (https://github.com/ansible-collections/community.hashi_vault/issues/257).
+ - vault_pki_certificate - add ``vault_pki_certificate`` to the ``community.hashi_vault.vault``
+ action group (https://github.com/ansible-collections/community.hashi_vault/issues/251).
+ - vault_read module & lookup - no friendly error message was given when ``hvac``
+ was missing (https://github.com/ansible-collections/community.hashi_vault/issues/257).
+ - vault_token_create - add ``vault_token_create`` to the ``community.hashi_vault.vault``
+ action group (https://github.com/ansible-collections/community.hashi_vault/issues/251).
+ - vault_token_create module & lookup - no friendly error message was given when
+ ``hvac`` was missing (https://github.com/ansible-collections/community.hashi_vault/issues/257).
+ - vault_write - add ``vault_write`` to the ``community.hashi_vault.vault`` action
+ group (https://github.com/ansible-collections/community.hashi_vault/issues/251).
+ release_summary: 'This release finally contains dedicated KV plugins and modules,
+ and an exciting new lookup to help use plugin values in module calls.
+
+ With that, we also have a guide in the collection docsite for migrating away
+ from the ``hashi_vault`` lookup toward dedicated content.
+
+ We are also announcing that the ``token_validate`` option will change its
+ default value in version 4.0.0.
+
+ This is the last planned release before 3.0.0. See the porting guide for breaking
+ changes and removed features in the next version.'
+ fragments:
+ - 2.5.0.yml
+ - 246-action_group.yml
+ - 258-token_validate-default.yml
+ - 259-hvac-checks.yml
+ modules:
+ - description: Get a secret from HashiCorp Vault's KV version 1 secret store
+ name: vault_kv1_get
+ namespace: ''
+ - description: Get a secret from HashiCorp Vault's KV version 2 secret store
+ name: vault_kv2_get
+ namespace: ''
+ plugins:
+ lookup:
+ - description: Returns plugin settings (options)
+ name: vault_ansible_settings
+ namespace: null
+ - description: Get a secret from HashiCorp Vault's KV version 1 secret store
+ name: vault_kv1_get
+ namespace: null
+ - description: Get a secret from HashiCorp Vault's KV version 2 secret store
+ name: vault_kv2_get
+ namespace: null
+ release_date: '2022-05-11'
+ 3.0.0:
+ changes:
+ deprecated_features:
+ - token_validate options - the shared auth option ``token_validate`` will change
+ its default from ``true`` to ``false`` in community.hashi_vault version 4.0.0.
+ The ``vault_login`` lookup and module will keep the default value of ``true``
+ (https://github.com/ansible-collections/community.hashi_vault/issues/248).
+ release_summary: 'Version 3.0.0 of ``community.hashi_vault`` drops support for
+ Ansible 2.9 and ansible-base 2.10.
+
+ Several deprecated features have been removed. See the changelog for the full
+ list.'
+ removed_features:
+ - aws_iam auth - the deprecated alias ``aws_iam_login`` for the ``aws_iam``
+ value of the ``auth_method`` option has been removed (https://github.com/ansible-collections/community.hashi_vault/issues/194).
+ - community.hashi_vault collection - support for Ansible 2.9 and ansible-base
+ 2.10 has been removed (https://github.com/ansible-collections/community.hashi_vault/issues/189).
+ - hashi_vault lookup - the deprecated ``[lookup_hashi_vault]`` INI config section
+ has been removed in favor of the collection-wide ``[hashi_vault_collection]``
+ section (https://github.com/ansible-collections/community.hashi_vault/issues/179).
+ fragments:
+ - 179-remove-lookup_hashi_vault-ini.yml
+ - 189-remove-ansible-2_9-2_10-support.yml
+ - 194-remove-aws_iam_login.yml
+ - 248-token_validate-change-default.yml
+ - 3.0.0.yml
+ release_date: '2022-05-21'
+ 3.1.0:
+ changes:
+ bugfixes:
+ - Add SPDX license headers to individual files (https://github.com/ansible-collections/community.hashi_vault/pull/282).
+ - Add missing ``BSD-2-Clause.txt`` file for BSD licensed content (https://github.com/ansible-collections/community.hashi_vault/issues/275).
+ - Use the correct GPL license for plugin_utils (https://github.com/ansible-collections/community.hashi_vault/issues/276).
+ deprecated_features:
+ - vault_kv2_get lookup - the ``engine_mount_point option`` in the ``vault_kv2_get``
+ lookup only will change its default from ``kv`` to ``secret`` in community.hashi_vault
+ version 4.0.0 (https://github.com/ansible-collections/community.hashi_vault/issues/279).
+ release_summary: 'A default value that was set incorrectly will be corrected
+ in ``4.0.0``.
+
+ A deprecation warning will be shown until then if the value is not specified
+ explicitly.
+
+ This version also includes some fixes and improvements to the licensing in
+ the collection, which does not affect any functionality.'
+ fragments:
+ - 279-incorrect-kv2-lookup-default.yml
+ - 3.1.0.yml
+ - licensing.yml
+ release_date: '2022-07-17'
+ 3.2.0:
+ changes:
+ bugfixes:
+ - community.hashi_vault plugins - tokens will be cast to a string type before
+ being sent to ``hvac`` to prevent errors in ``requests`` when values are ``AnsibleUnsafe``
+ (https://github.com/ansible-collections/community.hashi_vault/issues/289).
+ - modules - fix a "variable used before assignment" that cannot be reached but
+ causes sanity test failures (https://github.com/ansible-collections/community.hashi_vault/issues/296).
+ minor_changes:
+ - community.hashi_vault collection - add support for ``azure`` auth method,
+ for Azure service principal, managed identity, or plain JWT access token (https://github.com/ansible-collections/community.hashi_vault/issues/293).
+ - community.hashi_vault retries - `HTTP status code 412 <https://www.vaultproject.io/api-docs#412>`__
+ has been added to the default list of codes to be retried, for the new `Server
+ Side Consistent Token feature <https://www.vaultproject.io/docs/faq/ssct#q-is-there-anything-else-i-need-to-consider-to-achieve-consistency-besides-upgrading-to-vault-1-10>`__
+ in Vault Enterprise (https://github.com/ansible-collections/community.hashi_vault/issues/290).
+ release_summary: This release brings support for the ``azure`` auth method,
+ adds ``412`` to the default list of HTTP status codes to be retried, and fixes
+ a bug that causes failures in token auth with ``requests>=2.28.0``.
+ fragments:
+ - 289-handle-unsafe-strings.yml
+ - 290-retry-http-412.yml
+ - 293-support-azure-auth-method.yml
+ - 296-use-before-assignment.yml
+ - 3.2.0.yml
+ release_date: '2022-08-21'
+ 3.3.0:
+ changes:
+ minor_changes:
+ - vault_token_create - creation or orphan tokens uses ``hvac``'s new v1 method
+ for creating orphans, or falls back to the v0 method if needed (https://github.com/ansible-collections/community.hashi_vault/issues/301).
+ release_summary: 'With the release of ``hvac`` version ``1.0.0``, we needed
+ to update ``vault_token_create``''s support for orphan tokens.
+
+ The collection''s changelog is now viewable in the Ansible documentation site.'
+ fragments:
+ - 3.3.0.yml
+ - 301-orphan-token-handling.yml
+ release_date: '2022-09-19'
+ 3.3.1:
+ changes:
+ release_summary: No functional changes in this release, this provides updated
+ filter documentation for the public docsite.
+ fragments:
+ - 3.3.1.yml
+ release_date: '2022-09-25'
+ 3.4.0:
+ changes:
+ bugfixes:
+ - connection options - the ``namespace`` connection option will be forced into
+ a string to ensure cmpatibility with recent ``requests`` versions (https://github.com/ansible-collections/community.hashi_vault/issues/309).
+ minor_changes:
+ - vault_pki_generate_certificate - the documentation has been updated to match
+ the argspec for the default values of options ``alt_names``, ``ip_sans``,
+ ``other_sans``, and ``uri_sans`` (https://github.com/ansible-collections/community.hashi_vault/pull/318).
+ release_summary: 'This release includes a new module, fixes (another) ``requests``
+ header issue, and updates some inaccurate documentation.
+
+ This is the last planned release before v4.0.0.'
+ fragments:
+ - 3.4.0.yml
+ - 309-stringify-namespace.yml
+ - 318-pki-argspec-doc-mismatch.yml
+ modules:
+ - description: Delete one or more versions of a secret from HashiCorp Vault's
+ KV version 2 secret store
+ name: vault_kv2_delete
+ namespace: ''
+ release_date: '2022-11-03'
+ 4.0.0:
+ changes:
+ breaking_changes:
+ - auth - the default value for ``token_validate`` has changed from ``true``
+ to ``false``, as previously announced (https://github.com/ansible-collections/community.hashi_vault/issues/248).
+ - vault_kv2_get lookup - as previously announced, the default value for ``engine_mount_point``
+ in the ``vault_kv2_get`` lookup has changed from ``kv`` to ``secret`` (https://github.com/ansible-collections/community.hashi_vault/issues/279).
+ minor_changes:
+ - modules - all modules now document their action group and support for check
+ mode in their attributes documentation (https://github.com/ansible-collections/community.hashi_vault/issues/197).
+ release_summary: The next major version of the collection includes previously
+ announced breaking changes to some default values, and improvements to module
+ documentation with attributes that describe the use of action groups and check
+ mode support.
+ fragments:
+ - 197-module-attributes.yml
+ - 248-token_validate-default.yml
+ - 279-vault_kv2_get-lookup-mount-default.yml
+ - 4.0.0.yml
+ release_date: '2022-11-05'
+ 4.1.0:
+ changes:
+ deprecated_features:
+ - ansible-core - support for ``ansible-core`` versions ``2.11`` and ``2.12``
+ will be dropped in collection version ``5.0.0``, making ``2.13`` the minimum
+ supported version of ``ansible-core`` (https://github.com/ansible-collections/community.hashi_vault/issues/340).
+ - hvac - the minimum version of ``hvac`` to be supported in collection version
+ ``5.0.0`` will be at least ``1.0.2``; this minimum may be raised before ``5.0.0``
+ is released, so please subscribe to the linked issue and look out for new
+ notices in the changelog (https://github.com/ansible-collections/community.hashi_vault/issues/324).
+ release_summary: 'This release brings new generic ``vault_list`` plugins from
+ a new contributor!
+
+ There are also some deprecation notices for the next major version, and some
+ updates to documentation attributes.'
+ fragments:
+ - 324-deprecate-hvac.yml
+ - 325-fix attributes.yml
+ - 340-deprecate-core-211-212.yml
+ - 4.1.0.yml
+ modules:
+ - description: Perform a list operation against HashiCorp Vault
+ name: vault_list
+ namespace: ''
+ plugins:
+ lookup:
+ - description: Perform a list operation against HashiCorp Vault
+ name: vault_list
+ namespace: null
+ release_date: '2023-01-18'
+ 4.2.0:
+ changes:
+ bugfixes:
+ - hashi_vault lookup - a term string with duplicate options would silently use
+ the last value. The lookup now shows a warning on option duplication (https://github.com/ansible-collections/community.hashi_vault/issues/349).
+ deprecated_features:
+ - hashi_vault lookup - in ``v5.0.0`` duplicate term string options will raise
+ an exception instead of showing a warning (https://github.com/ansible-collections/community.hashi_vault/issues/356).
+ release_summary: This release contains a new module for KVv2 writes, and a new
+ warning for duplicated term string options in the ``hashi_vault`` lookup.
+ fragments:
+ - 350-raise-error-on-option-duplication-in-term-string.yml
+ - 4.2.0.yml
+ modules:
+ - description: Perform a write operation against a KVv2 secret in HashiCorp Vault
+ name: vault_kv2_write
+ namespace: ''
+ release_date: '2023-03-26'
+ 4.2.1:
+ changes:
+ release_summary: This patch version updates the documentation for the ``vault_kv2_write``
+ module. There are no functional changes.
+ fragments:
+ - 4.2.1.yml
+ release_date: '2023-04-27'