Release version 0.18.0

Changelog

• db186c2 adjust exported error messages
• 479bf34 cli: add support for encrypted private keys
• edeadf3 client: add Enclave type
• da7f9a8 include client IP address in audit log
• 7457bf3 kes: add Status API to client SDK
• 90a133d kestest: add new API tests
• 4073c5f key: remove Manager and export Cache
• e451721 move policy assignment to v1/policy API
• f5171cf remove HTTP trailers from v1/identity/list API
• 4a504d8 remove HTTP trailers from v1/identity/list API
• 74cf93c remove HTTP trailers from v1/key/list API
• 2d746fc remove support for go1.16, enable gofumpt
• 8a93db9 rename /v1/identity/forget API to /v1/identity/delete
• 5d0a857 simplify error and audit log API
• 1bc46ac sys: add minimal multi-tenancy support via Enclaves (#183)
• 816d343 update container base-image ubi-8.5
• 53fd3b7 use iterator pattern for policy API

Release version 0.17.6

Changelog

• 2629439 yml: fix regression parsing policy definitions

Release version 0.17.5

Changelog

• 5a52d51 vault: include K/V prefix when cloning config

Release version 0.17.4

Changelog

• 32f71e1 update dependencies

Release version 0.17.3

Changelog

f9be064 azure: add support for Azure managed identities
0e12ce4 cache: add offline caching of keys
0a52a99 cli: use correct policy name instead of command name
a229d68 config: restructure server initialization and configuration
79aa750 config: update server-config.yaml
abb4c3b fix printed admin identity on startup
f874de8 http: add tests for reading TLS private keys
2c76d12 status: expose backend KMS status
6634a0b testing: new package kestest

Docker images

• docker pull minio/kes:v0.17.3
• docker pull quay.io/minio/kes:v0.17.3

Release version 0.17.2

Changelog

6bdc0ff config: rename root identity (#160)
6c5eb7d tls: add support for encrypted private keys. (#161)

Docker images

• docker pull minio/kes:v0.17.2
• docker pull quay.io/minio/kes:v0.17.2

Release version 0.17.1

Changelog

23fcae9 vault: adjust key creation/deletion to Vault API (#159)

Docker images

• docker pull minio/kes:v0.17.1
• docker pull quay.io/minio/kes:v0.17.1

Release version 0.17.0

Changelog

f9fada6 Create SECURITY.md
507af83 Update SECURITY.md
780fcb7 auth: filter CA certificates when mapping client certificate to policy (#150)
960323f cache: if no cache expiry is provided, set default expiry (#146)
e9e907e fix error message (#158)
4c435cf fortanix: add support for Fortanix SDKMS
576e761 http: simplify request timeout handling (#154)
b0092c5 key: refactor key store backend API (#147)
283e933 metric: fix invalid type check for http.Flusher (#156)
b0819b6 metrics: improve CLI metrics UI
d182174 rename use_buildx -> use: buildx
c41c133 update prometheus dependency (#148)
c4379ce vault: ensure that a write to Vault actually succeeded (#144)

Docker images

• docker pull minio/kes:v0.17.0
• docker pull quay.io/minio/kes:v0.17.0

Release version 0.16.1

Changelog

ed28e20 api: new status API
d51a099 http: fix type conversion in timeout handler (#142)

Docker images

• docker pull minio/kes:v0.16.1
• docker pull quay.io/minio/kes:v0.16.1
• docker pull minio/kes:latest

Release version 0.16.0

Changelog

ef76ea3 add support for Azure KeyVault key store
a0a8311 secret: add key ID to encrypted keys (#141)

Docker images

• docker pull minio/kes:v0.16.0
• docker pull quay.io/minio/kes:v0.16.0
• docker pull minio/kes:latest