This repository has been archived by the owner on Jan 8, 2024. It is now read-only.
v1.0.3
Changes
- Token Renewal now occurs randomly within a 7 minute window if the token lease is longer than 10 minutes. This can prevent all gatekeeper instances going down simultaneously if there is an issue renewing a token.
- Gatekeeper will now throw an error if its started with
usage-store
vault on the same mount point aspolicy-path
ifvault-kv-version
isv1
. - The wildcard logic was changed, and will now match partial subfields between
:
s. For example the rulefoo:bar:baz/*
will allow a task namedfoo:bar:baz/baq
. - Connections weren't being closed in various places which leaked connections.