Releases: gocardless/theatre
v3.1.1
v3.1.0
v3.0.2
v3.0.1
v3.0.0 Remove envconsul dependency from theatre-envconsul
Previously we've shelled-out to the envconsul
binary in order to
retrieve our secret material from Vault. Through this we've discovered
several shortcomings:
- Failure to provision 'secret files' which have large/non-ASCII bodies.
- Failure to provision environment variables which are referencing the
same Vault key path. - Hanging when a process is wrapped with
envconsul
but there's no
secret material to fetch. - Workarounds required for shellwords splitting.
By removing envconsul
and implementing the fetching from Vault
ourselves we simplify the code significantly and end up with something
that's more performant and easy to reason about, as well as fixing the
above issues.
We also change the namespace annotation to enable the webhook from
envconsul-secrets-injector
to theatre-secrets-injector
. We retain
support for the old pod annotation envconsul-injector.vault.crd.gocardless.com
to allow for a phased migration.
e1820c8 theatre-envconsul: add support for writing files
8e45f2c theatre-envconsul: Fix double error logging
4f9b21d theatre-envconsul: Log envconsul output upon failure
32c81b5 theatre-envconsul: acceptance test for vault-file support
daf489b Remove envconsul dependency from theatre-envconsul
08844bf Update tests for theatre-secrets/envconsul
d272c98 %s/envconsul/secrets/g
b8159db theatre-secrets: support old theatre-envconsul annotation
v2.4.0
f32dcdd Handle attaching to stopped pod gracefully
0a7f53c Fix splitting env vars in theatre-envconsul env
579059a Update theatre-envconsul README
c8c3d43 Fix info log in theatre-envconsul
64ce621 Remove the lease option from theatre-envconsul
25bf152 Update ctx todos in vault manager acceptance test
709c411 Delete theatre-envconsul acceptance test
0f0df74 Look up path of the binary to execute before executing
1750791 Update acceptance test code
abd7883 Add lease option to theatre-envconsul exec
6329d99 Add env command to theatre-envconsul