Skip to content

Releases: clear-street/gestalt

3.4.2

16 Aug 19:07
7a259a8
Compare
Choose a tag to compare

Re-authenticate when the token is about to expire

  • This fix addresses permission denied errors for services that run longer than max_lease_ttl

3.4.1

07 Aug 17:16
367ae55
Compare
Choose a tag to compare

Returning Raw string instead of parsing it

  • Returning Raw string instead of parsing. This fixes the case where secret has \$ in - Python would retu
    rn $

Lazily connect to Vault

06 Mar 16:13
d0ba5e9
Compare
Choose a tag to compare
  • Instead of connecting to Vault on Vault() instantiation, connect to Vault on first .get() call to Vault.

Runtime Configuration of Vault Retry Delay and Tries

11 Jan 19:22
87b3e65
Compare
Choose a tag to compare
  • Allows runtime configuration of vault provider retry delay and tries.
  • Adds a CHANGELOG.md

Retry requests to vault that timeout

08 Dec 17:09
b08e255
Compare
Choose a tag to compare

This version includes vault request timeouts as a retry-able exception type for the vault provider.

Fix nested key default bug

19 Oct 15:30
db16f6f
Compare
Choose a tag to compare
3.3.4

Merge pull request #39 from SparkeyG/sparkeyg/issue-38/nested-key-def…

Fix Vault thread memory leak

17 Oct 15:31
aa728e4
Compare
Choose a tag to compare

Stop Vault worker thread prior to GC so Config can be cleaned up properly.

Bump pyyaml to 6.0.1

02 Aug 20:16
e9ebcca
Compare
Choose a tag to compare

Upgrade pyyaml to 6.0.1 to address the cython 3 compatibility issue.

Remove async usage

06 Jul 18:36
22a1385
Compare
Choose a tag to compare

Removes unnecessary async usage throughout the project.

Add vault ttl caching

21 Jun 17:33
e10bfcb
Compare
Choose a tag to compare
  • Adds vault response caching in vault provider vault.py -- for supporting vault responses with a TTL (i.e. Snowflake password rotation). This is done via keeping an internal dictionary where keys are the vault key and values are time to expiry.

  • Gestalt no longer writes the interpolated value of the provider key. It instead keeps the value as is (ref+vault://) and if a key in the underlying gestalt dict starts with the Vault provider scheme, it will dispatch the request to the .get vault provider method (which could be cached).

  • Moves pytest fixtures into a dedicated conftest.py module.