v2.19.1

SECURITY:

• resource/vault_gcp_auth_backend_role: Fixed typo in bound_labels parameter name causing no values to be applied to created roles CVE-2021-30476 (#1028)

v2.19.0

FEATURES:

• New Resource: terraform_cloud_secret resources (#959)

IMPROVEMENTS:

• resource/pki_secret_backend: Support allowed_domains_template option for vault_pki_secret_backend_role (#869)

BUG FIXES:

• resource/vault_identity_group: Don't send name parameter unless specified (#1002)

v2.18.0

FEATURES:

• New Resource: vault_password_policy resource (#927)

IMPROVEMENTS:

• resource/vault_consul_secret_backend: Extend consul secret engine definition to cover all vault parameters (#910)
• resource/vault_jwt_auth_backend: Added support for provider_config (#943)

v2.17.0

2.17.0 (December 15, 2020)

FEATURES:

• New Data Source: vault_nomad_access_token data source (#923)
• New Resource: vault_nomad_secret_backend resource (#923)
• New Resource: vault_nomad_secret_role resource (#923)

IMPROVEMENTS:

• resource/vault_audit: added support for local mount to prevent replicating the audit backend (#915)
• resource/jwt_auth_backend_role: Added support for using globs in matching bound_claims (#877)
• resource/vault_aws_auth_backend_client: Added sts_region parameter (#931)
• resource/vault_azure_secret_backend_role: Added support for azure_groups (#891)
• resource/vault_identity_oidc_role: client_id parameter can optionally be configured (#815)

BUG FIXES:

• resource/vault_identity_entity: Fixed nil pointer exception (#899)
• resource/vault_mount: Fixed bug where mount was deleted when description was changed (#929)

v2.16.0

FEATURES:

• New Data Source: vault_ad_access_credentials data source (#902)
• New Resource: vault_ad_secret_backend resource (#902)
• New Resource: vault_ad_secret_role resource (#902)
• New Resource: vault_ad_secret_library resource (#902)

IMPROVEMENTS:

• resource/vault_gcp_auth_backend: added support for local mount to prevent replicating the secret engine (#861)
• data.vault_aws_access_credentials : Add optional ttl parameter to data source (#878)

BUG FIXES:

• resource/vault_jwt_auth_backend: Fix possible reoccuring diff when using oidc_client_secret (#803)

v2.15.0

FEATURES:

• New Data Source: vault_transit_decrypt data source (#872).
• New Data Source: vault_transit_encrypt data source (#872).

IMPROVEMENTS:

• resource/vault_gcp_secret_backend: added support for local mount to prevent replicating the secret engine (#855)
• resource/vault_ssh_secret_backend_role: added support for new allowed_users_template argument(#875)
• resource/vault_ssh_secret_backend_role: added support for new algorithm_signer argument(#809)
• resource/vault_kubernetes_auth_backend_config: Add disable_iss_validation and disable_local_ca_jwt config parameters to k8s auth backend (#870)
• data/vault_kubernetes_auth_backend_config: Add disable_iss_validation and disable_local_ca_jwt config parameters to k8s auth backend (#870)

v2.14.0

FEATURES:

• New Resource: vault_quota_rate_limit resource to manage resource quota limit (#825).

BUG FIXES:

• resource/vault_aws_secret_backend_role: fix AWS Secrets Engine Role resource to allow only IAM Groups (#862)
• resource/vault_ssh_secret_backend_ca: detect misconfigured resource and remove from state (#856)

v2.13.0

IMPROVEMENTS:

• resource/transit_secret_backend_key: add supported by Vault type of algorithm rsa-3072 (#773)
• data.vault_generic_secret: Mark data and data_json as Sensitive (#844)
• Add iam_groups to vault_aws_secret_backend_role (#826)
• Add support for uri_sans parameter for resource vault_pki_secret_backend_cert (#759)

BUG FIXES:

• data/vault_generic_secret: Fix perpetual diff when using Terraform v0.13.0 (#849)

v2.12.2

BUG FIXES:

• data.vault_aws_access_credentials: Revert #832, which inadvertently introduced issues when the token policy did not have the required permissions to read the root configuration. (#837)

v2.12.1

2.12.1 (July 30, 2020)

BUG FIXES:

• data.vault_aws_access_credentials: Add support for passing region information stored in Vault backend to AWS Config (#832)