v2.11.0

IMPROVEMENTS:

• Add headers provider configuration setting to allow setting HTTP headers for all requests to the Vault server (#730).

BUG FIXES:

• vault_jwt_auth_backend: Fix plan error when oidc_discovery_url, jwks_url, or jwt_validation_pubkeys is set to a value that is not known until apply time (#753).
• vault_pki_secret_backend_root_cert, vault_pki_secret_backend_root_sign_intermediate, and vault_pki_secret_backend_sign: Fix serial field (#761).
• vault_token: Avoid panic when vault_token is gone from the server (#740).
• vault_approle_auth_backend_role: Fix perpetual diff when policies and period are updated to be token_policies and token_period (#744).
• vault_jwt_auth_backend_role: Fix crash when bound_audiences is empty (#763).
• vault_identity_group: Fix removal of policies, member_group_ids, and member_entity_ids (#766).

v2.10.0

FEATURES:

• Add vault_azure_access_credentials data source that retries creds before returning them (#713).
• To vault_database_secret_backend_connection, add support for the elasticsearch-database-plugin (#704).

IMPROVEMENTS:

• Add add_address_to_env argument to set the value of the provider's address argument as the VAULT_ADDR environment variable in the Terraform process, enabling VAULT_ADDR external token helpers to work with this provider (#651).
• Provide the ability to encrypt generated tokens using Keybase when using /auth/token/create, /auth/token/create-orphan, or /auth/token/create/{role_name} (#686).

BUG FIXES:

• In vault_aws_auth_backend_role, allow role_arns and policy_arns to be used together (#710).

v2.8.0

v2.8.0

v2.7.0

v2.7.0

v2.6.0

FEATURES:

• Adds a resource for the /database/static-roles/{name} endpoint (#577).
• Adds a resource for the /identity/lookup/entity endpoint (#587).

IMPROVEMENTS:

• Improved deprecation notices for Vault 1.2 token.* fields (#565).
• Adds new JWT Auth role fields introduced with Vault 1.2 (#566).
• Eliminates the need to add an outer delay while waiting for AWS creds to propagate (#571).
• For the /consul/roles/{name} endpoint, adds support for ttl, max_ttl, token_type, and local fields (#581).
• For the /sys/namespaces/{path} endpoint, uses the path for the namespace ID to allow imports (#570).

BUG FIXES:

• Fix panic when trying to write an entity alias that already exists (#573).

v2.0.0

Please see the upgrade guide for more information about upgrading to the 2.0.0 version of the provider.