Keywhiz Versions Save

Notable changes

• Secrets now have the concept of an "owner"
• A secret owner has full control over secret assignments - that is, decide which groups are assigned to a secret
• This owner is nullable to be backwards compatible
• Added SPIFFE support for clients

Full Changelog: https://github.com/square/keywhiz/compare/v0.10.1...v0.11.0

Notable changes

• Added new paginated Expiring Secrets API endpoint to the automation client

More details in the changelog.

Compare changes since v0.10.0

Notable changes

• Added HMAC on database rows to detect tampering, including backfill job for updating systems already in operation.
• Added database-enforced uniqueness constraint on secret names and renaming of secrets when deleted.
• Upgraded many dependencies.

Note: Due to an issue with the release process, no artifacts were uploaded to Maven Central.

More details in the changelog.

Compare changes since v0.9.0

Notable changes

• upgraded to JDK 11
• updated dropwizard to 1.2.9

Note: Due to an issue with the release process, no artifacts were uploaded to Maven Central.

More details in the changelog.

Compare changes since v0.8.0