Skip to content

v0.8.0 - Auth Stuff

Compare
Choose a tag to compare
@thomasmitchell thomasmitchell released this 15 Oct 22:10
· 48 commits to master since this release

New Features

  • Vault AppRole is now supported as an auth method. The auth.role_id and auth.role_secret properties of the Vault backend configure this. The token returned can be refreshed.
  • Vault periodic tokens are now supported as an auth method. If the token given is renewable, Doomsday will attempt to renew it.
  • If the storage backend encodes individual keys as YAML (or JSON), Doomsday will now parse the structure and look for certificates therein.

Backend Improvements

  • The Vault backend now reuses connections between requests. It now scrapes noticeably faster as a result.
  • The Credhub and Ops Manager backends are now slightly more resilient, as they will try to perform a Password authentication to get a new token if their token has expired and password auth was configured, instead of just being unable to renew.

Bug Fixes

  • Credhub and OpsMan backends no longer leak file descriptors when talking to UAA.
  • The Web UI's scrollbar no longer falls under the navbar

Web UI

  • The Web UI has been converted to Typescript and is now targeting ECMAScript 6. This may break support for some older browsers.
  • The Web UI now features a new font that better distinguishes between upper and lower case letters.
  • Added a Show All button at the bottom of the dashboard that shows all the certs Doomsday is tracking.