changelog++

This commit is contained in:
Jeff Mitchell 2018-04-25 12:09:49 -04:00
parent a6644bff6f
commit 8d90f441ba
1 changed files with 4 additions and 1 deletions

View File

@ -41,6 +41,9 @@ FEATURES:
* `vault kv patch` command: A new `kv patch` helper command that allows
modifying only some values in existing data at a K/V path, but uses
check-and-set to ensure that this modification happens safely.
* AppRole Local Secret IDs: Roles can now be configured to generate secret IDs
local to the cluster. This enables performance secondaries to generate and
consume secret IDs without contacting the primary.
* AES-GCM Support for PKCS#11 [BETA] (Enterprise): For supporting HSMs,
AES-GCM can now be used in lieu of AES-CBC/HMAC-SHA256. This has currently
only been fully tested on AWS CloudHSM.
@ -52,7 +55,7 @@ FEATURES:
IMPROVEMENTS:
* auth/approle: Support for cluster local secret IDs. This enables secondaries
to generate secret IDs without contacting the primary [GH-4427] (enterprise)
to generate secret IDs without contacting the primary [GH-4427]
* auth/token: Add to the token lookup response, the policies inherited due to
identity associations [GH-4366]
* auth/token: Add CIDR binding to token roles [GH-815]