Granted Versions Save

This release fixes an issue when using Granted to authenticate to an OIDC provider on Windows, when using Granted with Common Fate.

What's Changed

• Updated sdk to fix windows token store issue by @shwethaumashanker in https://github.com/common-fate/granted/pull/660

Full Changelog: https://github.com/common-fate/granted/compare/v0.26.1...v0.26.2

What's Changed

• fix profile registry sync for registries without a type by @chrnorm in https://github.com/common-fate/granted/pull/659

Full Changelog: https://github.com/common-fate/granted/compare/v0.26.0...v0.26.1

This release introduces initial support for HTTP Profile Registries. HTTP registries implement the granted.registry.aws.v1alpha1 API.

To add a HTTP registry, you can run:

granted registry add --name <name> --url <url_of_registry_deployment> --type http

The Common Fate platform implements the HTTP Profile Registry in the v1.42.0 release.

You can read more about Profile Registries here.

What's Changed

• add command for setting up new cf registry by @meyerjrr in https://github.com/common-fate/granted/pull/653
• Fix the default type for the 'granted registry add' command by @chrnorm in https://github.com/common-fate/granted/pull/657

Full Changelog: https://github.com/common-fate/granted/compare/v0.25.0...v0.26.0

This release adds support for using Sprig template functions in granted sso populate and granted sso generate. Here's an example:

granted sso populate --sso-region us-east-1 --prune --prefix gen_ --profile-template '{{ .RoleName | strings.ToLower }}-{{ .AccountName | strings.ToLower }}' https://<snip>.awsapps.com/start

Additionally, this release allows granted sso generate/granted sso populate configuration to be persisted in the Granted config file (~/.granted/config by default). You can now add the following section to your config file:

[SSO.default]
StartURL = "https://d-976708da7d.awsapps.com/start"
SSORegion = "ap-southeast-2"

and then run the following command to generate a ~/.aws/profile file, without needing to provide additional arguments:

granted sso generate

A huge thankyou to @mikesarver for contributing both of these new improvements.

Additionally, this release fixes some release pipeline issues which caused keychain errors in v0.24 for Intel MacOS (#647). If you're experiencing issues on v0.24 please update to this release.

What's Changed

• bump awsconfigfile by @mikesarver in https://github.com/common-fate/granted/pull/648
• for granted sso command, add storing parameters in input config https://github.com/common-fate/granted/issues/650 by @mikesarver in https://github.com/common-fate/granted/pull/651

New Contributors

• @mikesarver made their first contribution in https://github.com/common-fate/granted/pull/648

Full Changelog: https://github.com/common-fate/granted/compare/v0.24.0...v0.25.0

This version adds support for clearing the Granted cache non-interactively, thanks to @jsproede in #643.

granted cache clear --storage session-credentials --profile [profile_name] 

skips the prompts and clears the cache entry immediately.

This version additionally fixes the fish shell completions thanks to @Hawkbawk in #645.

What's Changed

• support JIT role activation in assume --console commands by @meyerjrr in https://github.com/common-fate/granted/pull/644
• CLI flags to specify storage and profile to clear credential cache without prompt by @jsproede in https://github.com/common-fate/granted/pull/643
• Autoload fish completions and fix Makefile by @Hawkbawk in https://github.com/common-fate/granted/pull/645

New Contributors

• @jsproede made their first contribution in https://github.com/common-fate/granted/pull/643
• @Hawkbawk made their first contribution in https://github.com/common-fate/granted/pull/645

Full Changelog: https://github.com/common-fate/granted/compare/v0.23.2...v0.24.0

What's Changed

• Increase backoff for attempted assume by @meyerjrr in https://github.com/common-fate/granted/pull/640
• Bump golang.org/x/net from 0.20.0 to 0.23.0 by @dependabot in https://github.com/common-fate/granted/pull/641

Full Changelog: https://github.com/common-fate/granted/compare/v0.23.1...v0.23.2

What's Changed

• Ensure "firefoxstdout" doesn't get prefix-matched as "firefox" by @gautamg795 in https://github.com/common-fate/granted/pull/635
• Propagate prefixDuplicateProfiles option by @sosheskaz in https://github.com/common-fate/granted/pull/639
• Add apigateway to service map by @treuherz in https://github.com/common-fate/granted/pull/636

New Contributors

• @gautamg795 made their first contribution in https://github.com/common-fate/granted/pull/635
• @treuherz made their first contribution in https://github.com/common-fate/granted/pull/636

Full Changelog: https://github.com/common-fate/granted/compare/v0.23.0...v0.23.1

This release brings a few minor bug fixes and support for Just-In-Time (JIT) access using Common Fate. For more information on JIT access, check out the JIT recipe in our documentation. A big thankyou to @Nepoxx for making their first contribution in this release!

What's Changed

• Cleanup profile registry implementation + improve testability by @chrnorm in https://github.com/common-fate/granted/pull/622
• fix bug where every line is removed in config by @Nepoxx in https://github.com/common-fate/granted/pull/631
• Update just-in-time access integration by @chrnorm in https://github.com/common-fate/granted/pull/630
• cleanup the large banners and replace them with a single-line version by @chrnorm in https://github.com/common-fate/granted/pull/633
• add a check for empty access key ID when caching by @chrnorm in https://github.com/common-fate/granted/pull/632

New Contributors

• @Nepoxx made their first contribution in https://github.com/common-fate/granted/pull/631

Full Changelog: https://github.com/common-fate/granted/compare/v0.22.0...v0.23.0

IAM Federated logins now have attributable username in Cloudtrail

• The changes refactor the way federation token ID is used for AWS IAM credentials. Instead of relying on the userID which was previously parsed, the code now uses the userName which is more easily attributable to the IAM user name in the Cloudtrail events list view.

What's Changed

• fix runtime error when sso token expires by @shwethaumashanker in https://github.com/common-fate/granted/pull/627
• Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 by @dependabot in https://github.com/common-fate/granted/pull/621
• feat: Use aws:username for IAM initiated federated console sessions. by @matthewhembree in https://github.com/common-fate/granted/pull/626

New Contributors

• @matthewhembree made their first contribution in https://github.com/common-fate/granted/pull/626

Full Changelog: https://github.com/common-fate/granted/compare/v0.21.1...v0.22.0

What's Changed

• Revert breaking change to 'granted login' with additional prompt for SSO scopes by @chrnorm in https://github.com/common-fate/granted/pull/618
• Add --so-scope in hint for granted sso login by @keymon in https://github.com/common-fate/granted/pull/619

New Contributors

• @keymon made their first contribution in https://github.com/common-fate/granted/pull/619

Full Changelog: https://github.com/common-fate/granted/compare/v0.21.0...v0.21.1