The Wire · Showcase
VAULT LDAP GETS ON-DEMAND PASSWORD ROTATION, PACKER CUTS v1.16.0
By RepoJournal · Filed · About HashiCorp
Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.
The terraform-provider-vault added a rotate_on_read configuration field to LDAP secrets engine and static roles [1], complementing existing scheduled rotation mechanisms and giving operators finer control over credential lifecycle. Packer shipped v1.16.0 [3] with a gRPC module update, keeping the build tool current with upstream dependencies. Consul-K8s merged changes to disable enterprise testcases during community edition acceptance test runs [2], tightening test coverage to match the actual shipped surface. Routine dependency updates landed across go-cty-funcs and lineal as actions/checkout bumped from 7.0.0 to 7.0.1 [4] [5] with safety improvements for PR workflows.
One email a day. Unsubscribe in one click.
Keep up with HashiCorp in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Review LDAP rotate-on-read configuration if you manage Vault secrets engine access hashicorp/terraform-provider-vault [plan]
- → Pull Packer v1.16.0 into your build pipelines hashicorp/packer [plan]
- → Update actions/checkout to 7.0.1 across CI workflows hashicorp/go-cty-funcs [monitor]
References
- [1] add rotate-on-read option on ldap secrets ↗ hashicorp/terraform-provider-vault
- [2] Disabling ENT testcases for Consul CE acceptance test case runs (#5510) hashicorp/consul-k8s
- [3] version: cut release v1.16.0 (#13682) hashicorp/packer
- [4] [chore] : Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group ↗ hashicorp/go-cty-funcs
- [5] Bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions group ↗ hashicorp/lineal