changelog++

This commit is contained in:
Jeff Mitchell 2016-02-02 11:38:27 -05:00
parent 00e2504651
commit fc5a09135f
1 changed files with 5 additions and 4 deletions

View File

@ -21,10 +21,11 @@ DEPRECATIONS/BREAKING CHANGES:
file, environment variables, and CLI flags. [GH-871] file, environment variables, and CLI flags. [GH-871]
* `etcd` physical backend: `sync` functionality is now supported and turned on * `etcd` physical backend: `sync` functionality is now supported and turned on
by default. This can be disabled. [GH-921] by default. This can be disabled. [GH-921]
* `transit`: Attempting to encrypt a value with a key that does not yet exist * `transit`: If a client attempts to encrypt a value with a key that does not
now results in an error, not creation of the key. The previous behavior can yet exist, what happens now depends on the capabilities set in the client's
be toggled on via the `allow_upsert` parameter to the new `transit/config` ACL policies. If the client has `create` (or `create` and `update`)
endpoint. [GH-1011] capability, the key will upsert as in the past. If the client has `update`
capability, they will receive an error. [GH-1012]
* `token-renew` CLI command: If the token given for renewal is the same as the * `token-renew` CLI command: If the token given for renewal is the same as the
client token, the `renew-self` endpoint will be used in the API. Given that client token, the `renew-self` endpoint will be used in the API. Given that
the `default` policy (by default) allows all clients access to the the `default` policy (by default) allows all clients access to the