All notable changes to Berglas will be documented in this file. This file is maintained by humans and is therefore subject to error.
- cli: deprecate
--generations
in favor of hash-based syntax
- core: drop
ResolveValue
since it is no longer needed
- core: support for Secret Manager
- cli:
migrate
command migrates Berglas secrets to Secret Manager
- core: drop runtime environment lookup and associated API methods (see #87 for details)
- core: do not attempt to chmod on windows and plan9
- docs: various updates for products that have gone GA
- cli: remove local command short flags, use long-form flags instead, short flags will be reserved for global flags moving forward
- core: add structured logging support (cli default is "text" and sdk default is "json")
- core:
DetectRuntimeEnvironment
is now available on the client too - cli: add --log-format and --log-level flags for controlling output
- core: fix nil pointer when finalizing object writes
- core: resolve value uses the passed value instead of looking it up from the environment
- core: retry when setting GCS IAM permissions
- core: retry when setting KMS IAM permissions
- core: allow accessing a specific version of a secret
- cli: drop
version
command in favor of--version
flag - core: create will now return an error against an existing secret - use update instead
- core: add new
Read
API for returning the plaintext secret and metadata about the storage object - core: retry certain IAM functions due to eventual consistency
- cli:
edit
command for editing a secret in a local editor - cli:
update
command for updating an existing secret
- auto: [security] do not trust the environment variables
- cli:
list
command now outputs in a table with version and timestamp - cli: standardized exit codes - see README for more information
- core: delete all storage versions when deleting a secret
- core: create now returns a respobse struct
- core: list returns a struct with a list member instead of a raw list
- core: support multiple secret versions through GCS generation
- core: support for Google App Engine (GAE) flex and standard environments
- cli: also allow
berglas://
prefixes - core: properly convert to seconds for KMS rotation period during bootstrap
- core: support multiple containers being returned from the v1alpha API
- doc: update to match auto-generated KMS keyring
- core: update dependencies to latest version
- dist: mark published binaries as executable
- pkg/auto: Panic on error. The former behavior of logging but not throwing an
error can be restored by setting the environment variable
BERGLAS_CONTINUE_ON_ERROR
totrue
.
- pkg/auto: Retry transient errors
- pkg/retry: Add package for handling retries
- Initial release