All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Fix false positive on version check (CNJR-7876, cyberark/conjur-cli-go#152)
- Fix retrieval failure when variable identifier includes colon (CNJR-7752, cyberark/conjur-api-go#82)
0.12.10 - 2024-12-27
- Add functions to retrieve server version (CNJR-7207)
- Checks Conjur server version before using policy dry-run and fetch (CNJR-7207)
0.12.9 - 2024-12-13
- HTTP timeout is now configurable. cyberark/conjur-cli-go#150
0.12.8 - 2024-11-19
- Policy dry-run now returns deleted policy resources. (CNJR-6369)
- Policy dry-run now returns updated policy resources. (CNJR-6111)
- Policy dry-run now returns create policy resources. (CNJR-6110)
- Updated
shellescape
package to fix Go error on installation cyberark/conjur-api-go#182
0.12.6 - 2024-10-30
- Remove debug logging of "Authorization" header when processing requests (CNJR-7025)
0.12.5 - 2024-10-23
- Added RoleMembershipsAll to fetch inherited memberships for a role (CNJR-5213)
- Added support for creating a client using an OIDC token (CNJR-6081)
- Added support for rotating the API key of an authenticated host (CNJR-5699)
- Added support for checking authenticator status (CNJR-6371)
- Return error when trying to call unsupported methods in Conjur Cloud (CNJR-5700)
0.12.4 - 2024-08-01
- Added support for creating hosts with annotations via HostFactory (CNJR-5495)
- Added support for enabling authenticators (CNJR-5548)
- Added support for fetching effective policy (CNJR-5673)
- Redact "Authorization" header when logging requests using CONJURAPI_LOG (CONJSE-1897)
0.12.3 - 2024-07-15
- Rename
validate
query parameter todryRun
(CNJR-4593)
0.12.2 - 2024-07-15
- Rename validate policy type definition to Dry Run (CNJR-4593)
0.12.1 - 2024-07-08
- Automatically add 'api' prefix to Conjur Cloud base URLs (CNJR-5493)
- Default Account to 'conjur' for Conjur Cloud (CNJR-5494)
- Update validate policy type definition (CNJR-4593)
0.12.0 - 2024-05-05
- Reworked JWT authentication to use standard configuration options (CNJR-4190)
0.11.4 - 2024-05-09
- Rollback to Go 1.20 as a requirement to build conjur-cli-go as FIPS compliant (CONJSE-1864)
0.11.2 - 2024-04-18
- Added validate policy (CNJR-4539)
- Upgrade to Go 1.22 (CONJSE-1842)
0.11.1 - 2023-06-14
- Improved error message for failed JWT authentication cyberark/conjur-api-go#169
- Upgrade Go to 1.20 and golang.org/x/sys to 0.8.0 cyberark/conjur-api-go#175
- Upgrade ruby in bin/parse-changelog.sh from 2.5 to 3.1 cyberark/conjur-api-go#172
0.11.0 - 2023-02-28
- Added support for Conjur's LDAP authenticator cyberark/conjur-api-go#141
- Added support for Conjur's OIDC authenticator cyberark/conjur-api-go#144
- Added
CONJUR_AUTHN_JWT_TOKEN
to support authenticating via authn-jwt with the contents of a JSON Web Token (JWT) cyberark/conjur-api-go#143 - Added new API method
CheckPermissionForRole
cyberark/conjur-api-go#153
- Remove all usage of Conjur v4 cyberark/conjur-api-go#139
- Resource IDs can now be partially-qualified, adhering to the form
[<account>:]<kind>:<identifier>
. cyberark/conjur-api-go#153 - User and Host IDs passed to their respective API key rotation functions can
now be fully-qualified, adhering to the form
[[<account>:]<kind>:]<identifier>
. cyberark/conjur-api-go#166 - The Hostfactory id is no longer required to be a fully qualified id. cyberark/conjur-api-go#164
- Upgrade gopkg.in/yaml.v3 indirect dependencies to v3.0.1 and Dockerfile to golang:1.19.5 cyberark/conjur-api-go#158
0.10.2 - 2022-11-14
- Fixed bug with
CONJUR_AUTHN_JWT_HOST_ID
environment variable not being read cyberark/conjur-api-go#136
0.10.1 - 2022-06-14
- Update testify to 1.7.2 cyberark/conjur-api-go#133
0.10.0 - 2022-05-19
- New
CONJUR_AUTHN_JWT_HOST_ID
environment variable for authn-jwt cyberark/conjur-api-go#130
0.9.0 - 2022-02-20
- Update Dockerfile to use Go 1.17 base image cyberark/conjur-api-go#126
- New
CONJUR_AUTHN_JWT_SERVICE_ID
&JWT_TOKEN_PATH
environment variables as configuration to support authn-jwt cyberark/conjur-api-go#124
0.8.1 - 2021-12-16
- Update Golang version to 1.17 cyberark/conjur-api-go#121
- Update Golang version to 1.16. cyberark/conjur-api-go#117
0.8.0 - 2021-09-10
- RetrieveBatchSecretsSafe method is updated to use the
Accept-Encoding
header instead ofAccept
, consistent with recent updates on the Conjur server. cyberark/conjur-api-go#99
- New check in RetrieveBatchSecretSafe method which will return an error if the
Content-Type
header is not set in the response (this indicates Conjur is out of date with the client). cyberark/conjur-api-go#104
0.7.1 - 2021-03-01
- Resources method no longer sends improperly URL-encoded query strings when filtering resources with the "Search" parameter. Previously, if you used a "Search" value that included a slash "/", the client would return no results even if the server had matching resources due to an issue with the URL-encoding. cyberark/conjur-api-go#93
0.7.0 - 2021-02-10
- Updated Go versions to 1.15.
- RetrieveBatchSecretsSafe method, which allows the user to specify the use of the
Accept: base64
header in batch retrieval requests. This allows binary secrets to be retrieved from Conjur. cyberark/conjur-api-go#88
0.6.1 - 2020-12-02
- Errors from YAML parsing are now breaking and visible in logs. cyberark/conjur-api-go#74
0.6.0 - 2019-03-04
- Converted to Golang 1.12
- Started using os.UserHomeDir() built-in instead of go-homedir module
0.5.2 - 2019-02-06
- Fixed homedir pathing for Darwin/Linux
- Converted from Godep to native go modules for dependency management.
0.5.1 - 2019-02-01
- Fix path generation of variables with spaces
- Modify configuration loading to skip options that check home dirs if there is an error retrieving the home dir
0.5.0 - 2018-09-07
- Add support for passing fully qualified variable id to
RetrieveSecret
API method in v4 mode - Change signature of
conjurapi.LoadConfig
so it returns anerror
in addition to theconjurapi.Config
- Fix marshaling of
conjurapi.Config
into YAML.
0.4.0 - 2018-08-28
- Add
Resource
, to fetch a resource by id. - Add
Resources
, to show all resources, optionally filtered by aResourceFilter
. - Use a separate logrus logger for the API. Control the destination for messages with the environment variable
CONJURAPI_LOG
. - Add support for
.conjurrc
and.netrc
in Windows user directories. - Add support for
conjur.conf
in Windows system directory.
0.3.3 - 2018-08-02
- Update the tags on
PolicyResponse
so they match the JSON returned by the server.
0.3.2 - 2018-07-19
- Use github.com/sirupsen/logrus for logging.
- When the log level for logrus is set to DebugLevel, show debug information, including:
- what configuration information is contained in each of the locations (e.g. the environment, config files, etc), as well as the final configuration
- HTTP request sent to, and the responses received from, the Conjur server
- Make
CONJUR_VERSION
an alias forCONJUR_MAJOR_VERSION
to match other client libraries.
0.3.0 - 2018-01-09
- Adds new API methods
RotateAPIKey
andCheckPermission
. - Provides API methods that return secret data as an
io.ReadCloser
rather than of[]byte
. This way, the API client gets the only copy of the secret data and can handle it however she sees fit. - Loading a policy requires
PolicyMode
argument. - Loading a policy returns
PolicyResponse
.
0.2.0 - 2018-01-08
- Adds support for structured error responses from the Conjur v5 server, using the struct
conjurapi.ConjurError
. This is a backwards incompatible change. - All API methods accept fully qualified object ids in v5 mode. This is a backwards compatible bug fix.
- API methods which do not work in v4 mode return an appropriate error message. This is a backwards compatible bug fix.
0.1.0 - 2017-11-21
- Initial version