Go modules · #2029

github.com/hashicorp/vault-k8s

v1.7.6hashicorp/vault-k8s ↗

Last release 21 days ago
06 Aug 2026
Ships fairly regularly
a new release about every 6 weeks
Nearly every release is documented
notes for 46 of 46 stable releases
Nothing withdrawn
no release was ever pulled
7 years old
121 releases · first in 2019

Release timeline

121 releases since 2019

2020202120222023202420252026

Releases

v1.7.66 Aug 2026
Release notes
1.7.6 (August 6, 2026)

Changes:
- Building with Go 1.26.5
- Default Vault version updated to 2.0.4
- Test with Vault 2.0.4, 1.21.9, 1.20.14, 1.19.20
- Build linux/ppc64le UBI images and publish to ICR and Red Hat catalog
Dependency updates:
- Build(deps): bump ubi8/ubi-minimal from 1781701189 to 1785302650
- Build(deps): bump the gomod-backward-compatible group with 5 updates
  - Updates github.com/go-logr/logr from 1.4.3 to 1.4.4
  - Updates github.com/prometheus/client_golang from 1.23.2 to 1.24.1
  - Updates k8s.io/api from 0.36.2 to 0.36.3
  - Updates k8s.io/apimachinery from 0.36.2 to 0.36.3
  - Updates k8s.io/client-go from 0.36.2 to 0.36.3
- Security: upgrade Go toolchain 1.26.4 => 1.26.5 (fixes GO-2026-5856, GO-2026-4970)
- CI: update GitHub Actions to latest versions
  - actions/checkout v7.0.0 => v7.0.1
  - actions/setup-go v6.5.0 => v7.0.0
  - actions/setup-node v6.4.0 => v7.0.0
  - actions/setup-python v6.3.0 => v7.0.0
Open source →
Additional notes3 sources agree
Changes:
- Building with Go 1.26.5
- Default Vault version updated to 2.0.4
- Test with Vault 2.0.4, 1.21.9, 1.20.14, 1.19.20
- Build linux/ppc64le UBI images and publish to ICR and Red Hat catalog
Dependency updates:
- Build(deps): bump ubi8/ubi-minimal from 1781701189 to 1785302650
- Build(deps): bump the gomod-backward-compatible group with 5 updates
  - Updates github.com/go-logr/logr from 1.4.3 to 1.4.4
  - Updates github.com/prometheus/client_golang from 1.23.2 to 1.24.1
  - Updates k8s.io/api from 0.36.2 to 0.36.3
  - Updates k8s.io/apimachinery from 0.36.2 to 0.36.3
  - Updates k8s.io/client-go from 0.36.2 to 0.36.3
- Security: upgrade Go toolchain 1.26.4 => 1.26.5 (fixes GO-2026-5856, GO-2026-4970)
- CI: update GitHub Actions to latest versions
  - actions/checkout v7.0.0 => v7.0.1
  - actions/setup-go v6.5.0 => v7.0.0
  - actions/setup-node v6.4.0 => v7.0.0
  - actions/setup-python v6.3.0 => v7.0.0
Open source →
v1.7.529 Jun 2026
Release notes
1.7.5 (June 29, 2026)

Changes:
- Building with Go 1.26.4
- Build linux/s390x images
- Default Vault version updated to 2.0.3
- Test with Vault 2.0.3, 1.21.8, 1.20.13, 1.19.19
- Test with Kind v0.32.0
- Test with K8s 1.36.1, 1.35.5, 1.34.8, 1.33.12, 1.32.11
- Dependency updates:
  - container image alpine 3.23.4 => 3.24.1
  - container image ubi8/ubi-minimal 8.10-1777392407 => 1781701189
  - k8s.io/api v0.35.2 => v0.36.2
  - k8s.io/apimachinery v0.35.2 => v0.36.2
  - k8s.io/client-go v0.35.2 => v0.36.2
  - k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 => v0.0.0-20260210185600-b8788abfbbc2
  - sigs.k8s.io/controller-runtime v0.23.3 => v0.24.1
  - github.com/prometheus/common v0.66.1 => v0.67.5
  - github.com/prometheus/procfs v0.16.1 => v0.19.2
  - golang.org/x/crypto v0.49.0 => v0.53.0
  - golang.org/x/net v0.52.0 => v0.56.0
  - golang.org/x/sys v0.42.0 => v0.46.0
  - golang.org/x/term v0.41.0 => v0.44.0
  - golang.org/x/text v0.35.0 => v0.38.0
- CI: update GitHub Actions to latest versions
  - actions/checkout v4.2.2 => v7.0.0
  - actions/setup-node v4.3.0 => v6.4.0
  - actions/setup-python v5.5.0 => v6.3.0
  - actions/setup-go v5.4.0 => v6.5.0
  - actions/upload-artifact v7.0.0 => v7.0.1
  - actions/download-artifact v4.2.1 => v8.0.1
  - helm/kind-action v1.12.0 => v1.14.0
Open source →
Additional notes3 sources agree
Changes:
- Building with Go 1.26.4
- Build linux/s390x images
- Default Vault version updated to 2.0.3
- Test with Vault 2.0.3, 1.21.8, 1.20.13, 1.19.19
- Test with Kind v0.32.0
- Test with K8s 1.36.1, 1.35.5, 1.34.8, 1.33.12, 1.32.11
- Dependency updates:
  - container image alpine 3.23.4 => 3.24.1
  - container image ubi8/ubi-minimal 8.10-1777392407 => 1781701189
  - k8s.io/api v0.35.2 => v0.36.2
  - k8s.io/apimachinery v0.35.2 => v0.36.2
  - k8s.io/client-go v0.35.2 => v0.36.2
  - k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 => v0.0.0-20260210185600-b8788abfbbc2
  - sigs.k8s.io/controller-runtime v0.23.3 => v0.24.1
  - github.com/prometheus/common v0.66.1 => v0.67.5
  - github.com/prometheus/procfs v0.16.1 => v0.19.2
  - golang.org/x/crypto v0.49.0 => v0.53.0
  - golang.org/x/net v0.52.0 => v0.56.0
  - golang.org/x/sys v0.42.0 => v0.46.0
  - golang.org/x/term v0.41.0 => v0.44.0
  - golang.org/x/text v0.35.0 => v0.38.0
- CI: update GitHub Actions to latest versions
  - actions/checkout v4.2.2 => v7.0.0
  - actions/setup-node v4.3.0 => v6.4.0
  - actions/setup-python v5.5.0 => v6.3.0
  - actions/setup-go v5.4.0 => v6.5.0
  - actions/upload-artifact v7.0.0 => v7.0.1
  - actions/download-artifact v4.2.1 => v8.0.1
  - helm/kind-action v1.12.0 => v1.14.0
Open source →
v1.7.430 Apr 2026
Release notes
1.7.4 (April 30, 2026)

Changes:
- Building with Go 1.26.2
- Default Vault version updated to 2.0.0
- Dependency updates:
  - container image alpine 3.23.3 => 3.23.4
  - container image ubi8/ubi-minimal 8.10-1772599255 => 8.10-1777392407
  - github.com/hashicorp/vault/sdk v0.23.0 => v0.25.1
  - sigs.k8s.io/controller-runtime v0.23.1 => v0.23.3
Open source →
Additional notes3 sources agree
Changes:
- Building with Go 1.26.2
- Default Vault version updated to 2.0.0
- Dependency updates:
  - container image alpine 3.23.3 => 3.23.4
  - container image ubi8/ubi-minimal 8.10-1772599255 => 8.10-1777392407
  - github.com/hashicorp/vault/sdk v0.23.0 => v0.25.1
  - sigs.k8s.io/controller-runtime v0.23.1 => v0.23.3
Open source →
v1.7.35 Mar 2026
Release notes
1.7.3 (March 5, 2026)

Changes:
- Tested with Kubernetes versions 1.35-1.31
- Test with Kind v0.31.0
- Building with Go 1.25.7
- Default Vault version updated to 1.21.4
- Dependency updates:
  - container image alpine 3.23.2 => 3.23.3
  - container image ubi8/ubi-minimal 8.10-1765178706 => 8.10-1772599255
  - github.com/hashicorp/vault/sdk v0.20.0 => v0.23.0
  - k8s.io/api v0.34.3 => v0.35.2
  - k8s.io/apimachinery v0.34.3 => v0.35.2
  - k8s.io/client-go v0.34.3 => v0.35.2
  - k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 => v0.0.0-20251002143259-bc988d571ff4
  - sigs.k8s.io/controller-runtime v0.22.4 => v0.23.1
Open source →
Additional notes3 sources agree
Changes:
- Tested with Kubernetes versions 1.35-1.31
- Test with Kind v0.31.0
- Building with Go 1.25.7
- Default Vault version updated to 1.21.4
- Dependency updates:
  - container image alpine 3.23.2 => 3.23.3
  - container image ubi8/ubi-minimal 8.10-1765178706 => 8.10-1772599255
  - github.com/hashicorp/vault/sdk v0.20.0 => v0.23.0
  - k8s.io/api v0.34.3 => v0.35.2
  - k8s.io/apimachinery v0.34.3 => v0.35.2
  - k8s.io/client-go v0.34.3 => v0.35.2
  - k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 => v0.0.0-20251002143259-bc988d571ff4
  - sigs.k8s.io/controller-runtime v0.22.4 => v0.23.1
Open source →
v1.7.3-0.20260112210348-73bf01bff7d212 Jan 2026pre-release
Nothing published for this version
v1.7.218 Dec 2025
Release notes
1.7.2 (December 18, 2025)

Changes:
- Building with Go 1.25.5
- Dependency updates:
  - container image alpine 3.22.2 => 3.23.2
  - container image ubi8/ubi-minimal 8.10-1764046129 => 8.10-1765178706
  - k8s.io/api v0.34.2 => v0.34.3
  - k8s.io/apimachinery v0.34.2 => v0.34.3
  - k8s.io/client-go v0.34.2 => v0.34.3
Open source →
Additional notes3 sources agree
Changes:
- Building with Go 1.25.5
- Dependency updates:
  - container image alpine 3.22.2 => 3.23.2
  - container image ubi8/ubi-minimal 8.10-1764046129 => 8.10-1765178706
  - k8s.io/api v0.34.2 => v0.34.3
  - k8s.io/apimachinery v0.34.2 => v0.34.3
  - k8s.io/client-go v0.34.2 => v0.34.3
Open source →
v1.7.2-0.20251209174841-972ad52624e09 Dec 2025pre-release
Nothing published for this version
v1.7.11 Dec 2025
Release notes
1.7.1 (November 20, 2025)

Changes:
- Building with Go 1.25.4
- Default Vault version updated to 1.21.1
- Dependency updates:
  - Docker image ubi8/ubi-minimal 8.10-1295.1749680713 => 8.10-1763613452
  - github.com/hashicorp/vault/sdk v0.18.0 => v0.20.0
  - github.com/operator-framework/operator-lib v0.18.0 => v0.19.0
  - github.com/prometheus/client_golang v1.22.0 => v1.23.2
  - github.com/stretchr/testify v1.10.0 => v1.11.1
  - k8s.io/api v0.33.2 => v0.34.2
  - k8s.io/apimachinery v0.33.2 => v0.34.2
  - k8s.io/client-go v0.33.2 => v0.34.2
  - k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 => v0.0.0-20250604170112-4c0f3b243397
  - sigs.k8s.io/controller-runtime v0.21.0 => v0.22.4
Improvements:
- Add arm64 to the UBI container builds GH-799
Open source →
Additional notes3 sources agree
Changes:
- Building with Go 1.25.4
- Default Vault version updated to 1.21.1
- Dependency updates:
  - Docker image alpine 3.22.0 => 3.22.2
  - Docker image ubi8/ubi-minimal 8.10-1295.1749680713 => 8.10-1764046129
  - github.com/hashicorp/vault/sdk v0.18.0 => v0.20.0
  - github.com/operator-framework/operator-lib v0.18.0 => v0.19.0
  - github.com/prometheus/client_golang v1.22.0 => v1.23.2
  - github.com/stretchr/testify v1.10.0 => v1.11.1
  - k8s.io/api v0.33.2 => v0.34.2
  - k8s.io/apimachinery v0.33.2 => v0.34.2
  - k8s.io/client-go v0.33.2 => v0.34.2
  - k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738 => v0.0.0-20250604170112-4c0f3b243397
  - sigs.k8s.io/controller-runtime v0.21.0 => v0.22.4
Improvements:
- Add arm64 to the UBI container builds GH-799
Open source →
v1.7.1-0.20251023184803-73aa899c83e923 Oct 2025pre-release
Nothing published for this version
v1.7.1-0.20251006225519-78749e1626056 Oct 2025pre-release
Nothing published for this version
v1.7.1-0.20250806181116-169b40797edc6 Aug 2025pre-release
Nothing published for this version
v1.7.024 Jun 2025
Release notes
1.7.0 (June 24, 2025)

Changes:
- Building with Go 1.24.4
- Default Vault version updated to 1.19.5
- Testing with K8s versions 1.29 - 1.33
- Dependency updates:
  - Docker image alpine 3.21.3 => 3.22.0
  - Docker image ubi8/ubi-minimal 8.10-1179.1739286367 => 8.10-1295.1749680713
  - github.com/go-logr/logr v1.4.2 => v1.4.3
  - github.com/hashicorp/go-secure-stdlib/parseutil v0.1.9 => v0.2.0
  - github.com/hashicorp/vault/sdk v0.15.0 => v0.18.0
  - github.com/operator-framework/operator-lib v0.17.0 => v0.18.0
  - github.com/prometheus/client_golang v1.21.0 => v1.22.0
  - k8s.io/api v0.32.2 => v0.33.2
  - k8s.io/apimachinery v0.32.2 => v0.33.2
  - k8s.io/client-go v0.32.2 => v0.33.2
  - sigs.k8s.io/controller-runtime v0.20.2 => v0.21.0
Features:
- Add support for setting template_config.lease_renewal_threshold in Agent config GH-761
Open source →
Additional notes3 sources agree
Changes:
- Building with Go 1.24.4
- Default Vault version updated to 1.19.5
- Testing with K8s versions 1.29 - 1.33
- Dependency updates:
  - Docker image alpine 3.21.3 => 3.22.0
  - Docker image ubi8/ubi-minimal 8.10-1179.1739286367 => 8.10-1295.1749680713
  - github.com/go-logr/logr v1.4.2 => v1.4.3
  - github.com/hashicorp/go-secure-stdlib/parseutil v0.1.9 => v0.2.0
  - github.com/hashicorp/vault/sdk v0.15.0 => v0.18.0
  - github.com/operator-framework/operator-lib v0.17.0 => v0.18.0
  - github.com/prometheus/client_golang v1.21.0 => v1.22.0
  - k8s.io/api v0.32.2 => v0.33.2
  - k8s.io/apimachinery v0.32.2 => v0.33.2
  - k8s.io/client-go v0.32.2 => v0.33.2
  - sigs.k8s.io/controller-runtime v0.20.2 => v0.21.0
Features:
- Add support for setting template_config.lease_renewal_threshold in Agent config GH-761
Open source →
v1.6.226 Feb 2025
Release notes
1.6.2 (February 26, 2025)

Changes:
- Building with Go 1.23.6
- Default Vault version updated to 1.18.5
- Testing with K8s versions 1.28 - 1.32
- Dependency updates:
  - Docker image alpine 3.21.0 => 3.21.3
  - Docker image ubi8/ubi-minimal 8.10-1130 => 8.10-1179.1739286367
  - github.com/evanphx/json-patch v5.9.0+incompatible => v5.9.11+incompatible
  - github.com/hashicorp/go-secure-stdlib/parseutil v0.1.8 => v0.1.9
  - github.com/hashicorp/vault/sdk v0.14.0 => v0.15.0
  - github.com/operator-framework/operator-lib v0.15.0 => v0.17.0
  - golang.org/x/crypto v0.31.0 => v0.35.0
  - golang.org/x/net v0.32.0 => v0.35.0
  - golang.org/x/oauth2 v0.21.0 => v0.27.0
  - golang.org/x/sys v0.28.0 => v0.30.0
  - golang.org/x/term v0.27.0 => v0.29.0
  - golang.org/x/text v0.21.0 => v0.22.0
  - k8s.io/api v0.31.3 => v0.32.2
  - k8s.io/apimachinery v0.31.3 => v0.32.2
  - k8s.io/client-go v0.31.3 => v0.32.2
  - k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 => v0.0.0-20241104100929-3ea5e8cea738
  - sigs.k8s.io/controller-runtime v0.19.2 => v0.20.2
Bugs:
- Update webhook CA bundle verification log message GH-739
Open source →
Additional notes3 sources agree
Changes:
- Building with Go 1.23.6
- Default Vault version updated to 1.18.5
- Testing with K8s versions 1.28 - 1.32
- Dependency updates:
  - Docker image alpine 3.21.0 => 3.21.3
  - Docker image ubi8/ubi-minimal 8.10-1130 => 8.10-1179.1739286367
  - github.com/evanphx/json-patch v5.9.0+incompatible => v5.9.11+incompatible
  - github.com/hashicorp/go-secure-stdlib/parseutil v0.1.8 => v0.1.9
  - github.com/hashicorp/vault/sdk v0.14.0 => v0.15.0
  - github.com/operator-framework/operator-lib v0.15.0 => v0.17.0
  - golang.org/x/crypto v0.31.0 => v0.35.0
  - golang.org/x/net v0.32.0 => v0.35.0
  - golang.org/x/oauth2 v0.21.0 => v0.27.0
  - golang.org/x/sys v0.28.0 => v0.30.0
  - golang.org/x/term v0.27.0 => v0.29.0
  - golang.org/x/text v0.21.0 => v0.22.0
  - k8s.io/api v0.31.3 => v0.32.2
  - k8s.io/apimachinery v0.31.3 => v0.32.2
  - k8s.io/client-go v0.31.3 => v0.32.2
  - k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 => v0.0.0-20241104100929-3ea5e8cea738
  - sigs.k8s.io/controller-runtime v0.19.2 => v0.20.2
Bugs:
- Update webhook CA bundle verification log message GH-739
Open source →
v1.6.116 Dec 2024
Release notes
1.6.1 (December 16, 2024)

Changes:
- Dependency updates:
  - Docker image alpine 3.20.3 => 3.21.0
  - golang.org/x/crypto v0.30.0 => v0.31.0
Bugs:
- Fix metrics sidecar injection false positives GH-716
Open source →
Additional notes3 sources agree
Changes:
- Dependency updates:
  - Docker image alpine 3.20.3 => 3.21.0
  - golang.org/x/crypto v0.30.0 => v0.31.0
Bugs:
- Fix metrics sidecar injection false positives GH-716
Open source →
v1.6.05 Dec 2024
Release notes
1.6.0 (December 5, 2024)

Changes:
- Building with Go 1.22.10
- Default Vault version updated to 1.18.2
- Dependency updates:
  - Docker image ubi8/ubi-minimal 8.10-1086 => 8.10-1130
  - github.com/stretchr/testify v1.9.0 => v1.10.0
  - golang.org/x/crypto v0.28.0 => v0.30.0
  - golang.org/x/net v0.30.0 => v0.32.0
  - golang.org/x/sys v0.26.0 => v0.28.0
  - golang.org/x/term v0.25.0 => v0.27.0
  - golang.org/x/text v0.19.0 => v0.21.0
  - k8s.io/api v0.31.2 => v0.31.3
  - k8s.io/apimachinery v0.31.2 => v0.31.3
  - k8s.io/client-go v0.31.2 => v0.31.3
  - sigs.k8s.io/controller-runtime v0.19.1 => v0.19.2
Features:
- Agent injection telemetry GH-703 GH-709
Improvements:
- Support AGENT_INJECT_TLS_CA_CERT_FILE env option when using manual TLS GH-679
Open source →
Additional notes3 sources agree
Changes:
- Building with Go 1.22.10
- Default Vault version updated to 1.18.2
- Dependency updates:
  - Docker image ubi8/ubi-minimal 8.10-1086 => 8.10-1130
  - github.com/stretchr/testify v1.9.0 => v1.10.0
  - golang.org/x/crypto v0.28.0 => v0.30.0
  - golang.org/x/net v0.30.0 => v0.32.0
  - golang.org/x/sys v0.26.0 => v0.28.0
  - golang.org/x/term v0.25.0 => v0.27.0
  - golang.org/x/text v0.19.0 => v0.21.0
  - k8s.io/api v0.31.2 => v0.31.3
  - k8s.io/apimachinery v0.31.2 => v0.31.3
  - k8s.io/client-go v0.31.2 => v0.31.3
  - sigs.k8s.io/controller-runtime v0.19.1 => v0.19.2
Features:
- Agent injection telemetry GH-703 GH-709
Improvements:
- Support AGENT_INJECT_TLS_CA_CERT_FILE env option when using manual TLS GH-679
Open source →
v1.5.1-0.20241205201730-c46ef473ae945 Dec 2024pre-release
Nothing published for this version
v1.5.1-0.20241107065631-1ea4c765107d7 Nov 2024pre-release
Nothing published for this version
v1.5.06 Nov 2024
Release notes3 sources agree
Changes:
- Building with Go 1.22.8
- Default Vault version updated to 1.18.1
- Testing with Vault 1.16 - 1.18
- Testing with K8s versions 1.27 - 1.31
- Dependency updates:
  - Docker image alpine 3.20.1 => 3.20.3
  - Docker image ubi8/ubi-minimal 8.10-1018 => 8.10-1086
  - github.com/hashicorp/vault/sdk v0.13.0 => v0.14.0
  - github.com/operator-framework/operator-lib v0.14.0 => v0.15.0
  - github.com/prometheus/client_golang v1.19.1 => v1.20.5
  - golang.org/x/crypto v0.26.0 => v0.28.0
  - golang.org/x/net v0.28.0 => v0.30.0
  - golang.org/x/sys v0.24.0 => v0.26.0
  - golang.org/x/term v0.23.0 => v0.25.0
  - golang.org/x/text v0.17.0 => v0.19.0
  - k8s.io/api v0.30.2 => v0.31.2
  - k8s.io/apimachinery v0.30.2 => v0.31.2
  - k8s.io/client-go v0.30.2 => v0.31.2
  - k8s.io/utils v0.0.0-20240502163921-fe8a2dddb1d0 => v0.0.0-20240711033017-18e509b52bc8
  - sigs.k8s.io/controller-runtime v0.18.4 => v0.19.1
Features:
- Add annotations for customizing template delimiters GH-664
Bugs:
- Disable handling update on pods GH-619
Open source →
v1.4.3-0.20241104173840-fce3297331f04 Nov 2024pre-release
Nothing published for this version
v1.4.3-0.20241030003233-2a41305c148630 Oct 2024pre-release
Nothing published for this version
v1.4.3-0.20240827212253-f9186440cc0d27 Aug 2024pre-release
Nothing published for this version
v1.4.3-0.20240820220649-cd725f3d91c320 Aug 2024pre-release
Nothing published for this version
v1.4.23 Jul 2024
Release notes3 sources agree
Changes:
- Building with Go 1.22.5
- Default Vault version updated to 1.17.1
- Testing with Vault 1.15 - 1.17
- Dependency updates:
  - Docker image alpine 3.19.1 => 3.20.1
  - Docker image ubi8/ubi-minimal 8.9-1161 => 8.10-1018
  - github.com/go-logr/logr v1.4.1 => v1.4.2
  - github.com/hashicorp/vault/sdk v0.11.1 => v0.13.0
  - github.com/operator-framework/operator-lib v0.12.0 => v0.14.0
  - github.com/prometheus/client_golang v1.19.0 => v1.19.1
  - golang.org/x/crypto v0.22.0 => v0.24.0
  - golang.org/x/net v0.24.0 => v0.26.0
  - golang.org/x/sys v0.19.0 => v0.21.0
  - golang.org/x/term v0.19.0 => v0.21.0
  - golang.org/x/text v0.14.0 => v0.16.0
  - k8s.io/api v0.29.3 => v0.30.2
  - k8s.io/apimachinery v0.29.3 => v0.30.2
  - k8s.io/client-go v0.29.3 => v0.30.2
  - k8s.io/utils v0.0.0-20230726121419-3b25d923346b => v0.0.0-20240502163921-fe8a2dddb1d0
  - sigs.k8s.io/controller-runtime v0.17.2 => v0.18.4
Open source →
v1.4.2-0.20240703210137-09f70c84b3d23 Jul 2024pre-release
Nothing published for this version
v1.4.18 Apr 2024
Release notes3 sources agree
Changes:
- Building with Go 1.22.2
- Default Vault version updated to 1.16.1
- Dependency updates:
  - Docker UBI image ubi8/ubi-minimal 8.9-1137 => 8.9-1161
  - github.com/cenkalti/backoff/v4 v4.2.1 => v4.3.0
  - github.com/go-logr/logr v1.3.0 => v1.4.1
  - github.com/hashicorp/go-hclog v1.6.2 => v1.6.3
  - github.com/hashicorp/vault/sdk v0.11.0 => v0.11.1
  - golang.org/x/crypto v0.18.0 => v0.22.0
  - golang.org/x/net v0.20.0 => v0.24.0
  - golang.org/x/sys v0.16.0 => v0.19.0
  - golang.org/x/term v0.16.0 => v0.19.0
  - k8s.io/api v0.29.2 => v0.29.3
  - k8s.io/apimachinery v0.29.2 => v0.29.3
  - k8s.io/client-go v0.29.2 => v0.29.3
  - sigs.k8s.io/controller-runtime v0.16.3 => v0.17.2
Bugs:
- Enable logging from operator-lib's leader election (used during auto-tls certificate generation) GH-608
Open source →
v1.4.1-0.20240408183643-99c390d3d6b08 Apr 2024pre-release
Nothing published for this version
v1.4.1-0.20240320160614-84287a2bc14b20 Mar 2024pre-release
Nothing published for this version
v1.4.04 Mar 2024
Release notes3 sources agree
Features:
- Add support for max_connections_per_host within Agent injector GH-579
- Add support for error_on_missing_key within Agent injector GH-441
Changes:
- Default Vault version updated to 1.15.6
- Building with Go 1.21.7
- Testing with K8s versions 1.25-1.29
- Dependency updates:
  - Docker UBI image ubi8/ubi-minimal 8.8-1072.1697626218 => 8.9-1137
  - Docker alpine version 3.18.4 => 3.19.1
  - k8s.io/api v0.28.3 => v0.29.2
  - k8s.io/apimachinery v0.28.3 => v0.29.2
  - k8s.io/client-go v0.28.3 => v0.29.2
  - k8s.io/utils v0.0.0-20230406110748-d93618cff8a2 => v0.0.0-20230726121419-3b25d923346b`
  - github.com/hashicorp/go-hclog v1.5.0 => v1.6.2
  - github.com/hashicorp/go-secure-stdlib/tlsutil v0.1.2 => v0.1.3
  - github.com/hashicorp/vault/sdk v0.10.2 => v0.11.0
  - github.com/prometheus/client_golang v1.17.0 => v1.19.0
  - github.com/operator-framework/operator-lib v0.11.0 => v0.12.0
  - github.com/evanphx/json-patch v5.7.0 => v5.9.0
  - github.com/stretchr/testify v1.8.4 => v1.9.0
Open source →
v1.3.2-0.20240304224744-1a8db92701b04 Mar 2024pre-release
Nothing published for this version
v1.3.2-0.20240221224606-5cc7d47a517c21 Feb 2024pre-release
Nothing published for this version
v1.3.2-0.20240215195350-f3d5a6f58e5915 Feb 2024pre-release
Nothing published for this version
v1.3.2-0.20240202003159-80f087dade702 Feb 2024pre-release
Nothing published for this version
v1.3.2-0.20240119182709-063b387d5fd419 Jan 2024pre-release
Nothing published for this version
v1.3.2-0.20240113002539-93791376790113 Jan 2024pre-release
Nothing published for this version
v1.3.125 Oct 2023
Release notes3 sources agree
Changes:
- Default Vault version updated to 1.15.1
- Building with Go 1.21.3
- Testing with K8s versions 1.24-1.28
- Dependency updates:
  - Docker UBI image ubi8/ubi-minimal 8.8-1037 -> 8.8-1072.1697626218
  - Docker alpine version 3.18.3 -> 3.18.4
  - golang.org/x/crypto v0.11.0 => v0.14.0
  - golang.org/x/net v0.13.0 => v0.17.0
  - golang.org/x/sys v0.10.0 => v0.13.0
  - golang.org/x/term v0.10.0 => v0.13.0
  - golang.org/x/text v0.11.0 => v0.13.0
  - k8s.io/api v0.27.4 => v0.28.3
  - k8s.io/apimachinery v0.27.4 => v0.28.3
  - k8s.io/client-go v0.27.4 => v0.28.3
  - github.com/hashicorp/vault/sdk v0.9.2 => v0.10.2
  - github.com/prometheus/client_golang v1.16.0 => v1.17.0
  - github.com/evanphx/json-patch v5.6.0 => v5.7.0
Improvements:
- Injector can set CA certificate for injected pods via AGENT_INJECT_VAULT_CACERT_BYTES env var or -vault-cacert-bytes flag GH-507
- Remove refs to deprecated io/ioutil GH-516
Open source →
v1.3.1-0.20231025153541-a8525a28f06d25 Oct 2023pre-release
Nothing published for this version
v1.3.016 Aug 2023
Release notes3 sources agree
Improvements:
- Add NAMESPACE, HOST_IP, and POD_IP environment variables to Agent container using downward API GH-486
Changes:
- Templated secrets no longer require the -secret annotation GH-505
- Only inject Pods that are Pending GH-501
- Default to Vault 1.14.1
- Building with Go 1.20.7
- Testing with K8s versions 1.23-1.27
- Dependency updates:
  - github.com/cenkalti/backoff/v4 v4.2.0 -> v4.2.1
  - github.com/hashicorp/vault/sdk v0.8.1 -> v0.9.2
  - github.com/stretchr/testify v1.8.2 -> v1.8.4
  - github.com/prometheus/client_golang v1.14.0 -> v1.16.0
  - k8s.io/apimachinery v0.26.3 -> v0.27.4
  - k8s.io/api v0.26.3 -> v0.27.4
  - k8s.io/client-go v0.26.3 -> v0.27.4
  - golang.org/x/net v0.7.0 -> v0.13.0
  - golang.org/x/sys v0.5.0 -> v0.10.0
  - golang.org/x/term v0.5.0 -> v0.10.0
  - golang.org/x/text v0.7.0 -> v0.11.0
  - Docker alpine version 3.17.3 -> 3.18.3
  - Docker UBI image ubi8/ubi-minimal 8.7-1107 -> 8.8-1037
Bugs:
- Prevent auth-config-token-path from being overridden when another serviceaccount volume is present GH-457
Open source →
v1.2.2-0.20230816155549-1b1d69e438d516 Aug 2023pre-release
Nothing published for this version
v1.2.2-0.20230413013714-7a51d30c368613 Apr 2023pre-release
Nothing published for this version
v1.2.16 Apr 2023
Release notes3 sources agree
Changes:
- Default to Vault 1.13.1
- Building with Go 1.20.3
- Dependency updates:
  - github.com/cenkalti/backoff/v4 v4.1.3 -> v4.2.0
  - github.com/hashicorp/go-hclog v1.3.1 -> v1.5.0
  - github.com/hashicorp/vault/sdk v0.6.1 -> v0.8.1
  - golang.org/x/net v0.4.0 -> v0.7.0
  - golang.org/x/sys v0.3.0 -> v0.5.0
  - golang.org/x/term v0.3.0 -> v0.5.0
  - golang.org/x/text v0.5.0 -> v0.7.0
  - k8s.io/api v0.25.4 -> v0.26.3
  - k8s.io/apimachinery v0.25.4 -> v0.26.3
  - k8s.io/client-go v0.25.4 -> v0.26.3
  - k8s.io/utils v0.0.0-20220728103510-ee6ede2d64ed -> v0.0.0-20230406110748-d93618cff8a2
  - Docker UBI image ubi8/ubi-minimal 8.7 -> 8.7-1107
  - Used fixed Docker alpine version: 3.17.3
Bugs:
- Don't override shareProcessNamespace if an annotation is not present GH-445
Open source →
v1.2.1-0.20230302172811-d705584b30362 Mar 2023pre-release
Nothing published for this version
v1.2.06 Feb 2023
Release notes3 sources agree
Changes:
- Building with Go 1.19.5
- Update golang.org/x/net to v0.4.0 GH-409
- Default to Vault v1.12.3
Features:
- Add support for enabling sharedProcessNamespace on the Pod spec GH-408
- Add agent-telemetry annotation GH-413
Improvements:
- Set Kubernetes user-agent to include vault-k8s version GH-411
Bugs:
- Preserve metadata when updating the cert secret GH-401
Open source →
v1.1.016 Nov 2022
Release notes3 sources agree
Changes:
- Building with go 1.19.3
- Default to Vault v1.12.1
Features:
- Allow modifying agent and agent-init containers with json-patch GH-399
- Support for setting exit_on_err in the agent auto-auth method config GH-400.
Improvements:
- Dependency updates:
  - github.com/cenkalti/backoff/v4 v4.1.1 => v4.1.3
  - github.com/hashicorp/go-hclog v1.0.0 => v1.3.1
  - github.com/hashicorp/go-secure-stdlib/tlsutil v0.1.1 => v0.1.2
  - github.com/hashicorp/vault/sdk v0.2.1 => v0.6.1
  - github.com/mitchellh/cli v1.1.4 => v1.1.5
  - github.com/operator-framework/operator-lib v0.8.0 => v0.11.0
  - github.com/prometheus/client_golang v1.11.1 => v1.12.1
  - github.com/stretchr/testify v1.8.0 => v1.8.1
  - k8s.io/api v0.22.2 => v0.25.4
  - k8s.io/apimachinery v0.22.2 => v0.25.4
  - k8s.io/client-go v0.22.2 => v0.25.4
Open source →
v1.0.124 Oct 2022
Release notes3 sources agree
Changes:
- Default to Vault v1.12.0
Bugs:
- Default ephemeral storage resources to unset for injected containers GH-386
Improvements:
- Upgrade dependency golang.org/x/net from v0.0.0-20220708220712-1185a9018129 to v0.0.0-20221004154528-8021a29435af
- Upgrade dependency golang.org/x/sys from v0.0.0-20220520151302-bc2c85ada10a to v0.0.0-20220728004956-3c1f35247d10
- Upgrade dependency golang.org/x/text from v0.3.7 to v0.3.8
Open source →
v1.0.06 Sept 2022
Release notes3 sources agree
Changes:
- Upgrade Docker base image to alpine:3.16.2 GH-382
- Default to Vault v1.11.3
Features:
- Support for setting disable_keep_alives in the agent config GH-376
- Added flags, envs and annotations to control ephemeral storage resources for injected containers GH-360
Open source →
v0.17.028 Jul 2022
Release notes3 sources agree
Features:
- Support for setting disable_idle_connections in the agent config GH-366
Improvements:
- Added support to configure default vault namespace on the agent config GH-345
Bugs:
- Properly return admission errors GH-363
Open source →
v0.16.2-0.20220530093518-3d03f5d9927c30 May 2022pre-release
Nothing published for this version
v0.16.125 May 2022
Release notes3 sources agree
Improvements:
- ConfigMap with missing vault section should default to env vars GH-353
- Wait for certificate before starting HTTP listener GH-354
- Update example injector mutating webhook config to exclude agent pod GH-351
Bugs:
- Certificate watcher timer deadlock fix GH-350
Open source →
v0.16.011 May 2022
Release notes3 sources agree
Features:
- Add agent-enable-quit annotation GH-330
- Add go-max-procs annotation GH-333
- Add min and max auth backoff annotations and environment variables GH-341
Improvements:
- Add a name to the service port GH-262
Changes:
- Only update webhook CA bundles when needed GH-336
Open source →
v0.15.1-0.20220510165346-5d84872fa50b10 May 2022pre-release
Nothing published for this version
v0.15.1-0.20220503212038-a308303959a83 May 2022pre-release
Nothing published for this version
v0.15.1-0.20220428214458-398ff35f710d28 Apr 2022pre-release
Nothing published for this version
v0.15.1-0.20220428201210-0e73c986040328 Apr 2022pre-release
Nothing published for this version
v0.15.1-0.20220428175650-15f3572e73c528 Apr 2022pre-release
Nothing published for this version
v0.15.1-0.20220427154755-86684e65abab27 Apr 2022pre-release
Nothing published for this version
v0.15.1-0.20220405151021-c25fcef112015 Apr 2022pre-release
Nothing published for this version
v0.15.1-0.20220325013147-6145ef2f90bd25 Mar 2022pre-release
Nothing published for this version
v0.15.021 Mar 2022
Release notes3 sources agree
Features:
- Add agent-inject-containers annotation GH-313
Changes:
- Build with go 1.17.8
- Default to Vault v1.9.4
Open source →
v0.14.3-0.20220321193056-5d719e1de99121 Mar 2022pre-release
Nothing published for this version
v0.14.3-0.20220321181310-4e3b42e5f91821 Mar 2022pre-release
Nothing published for this version

github.com/hashicorp/vault-k8s

Release timeline

Releases

1.7.6 (August 6, 2026)

1.7.5 (June 29, 2026)

1.7.4 (April 30, 2026)

1.7.3 (March 5, 2026)

1.7.2 (December 18, 2025)

1.7.1 (November 20, 2025)

1.7.0 (June 24, 2025)

1.6.2 (February 26, 2025)

1.6.1 (December 16, 2024)

1.6.0 (December 5, 2024)