$ the-wire · showcase
Consul-k8s adopts pre-configured k8s auth methods, GCP CIS policies land
By RepoJournal · Filed · About HashiCorp · Composed from the cited sources · methodology
11 people shipped this
abbyck
@abbyck
1 cited
shashankNandigama
@shashankNandigama
1 cited
sanikachavan5
@sanikachavan5
1 cited
hashi-divyansh
@hashi-divyansh
1 cited
dependabot
@dependabot
1 cited
Zhihe Li
@ZedLi
natalie-todd
@natalie-todd
Gowrav Thota
@gowravthota-ibm
Abhishek Yadav
@LordAbhishek
panman90
@panman90
pajay-rao
@pajay-rao
The day's most consequential work is in consul-k8s, where multi-dataplane clusters can finally bring their own Kubernetes auth method instead of letting server-acl-init overwrite it, plus 17 new GCP CIS benchmark policies for Terraform users.
add support to use a pre-configured k8s auth method hashicorp/consul-k8s
Two new Helm values, global.acls.authMethod.name and global.acls.authMethod.create, let clusters consume a pre-existing Kubernetes auth method: Consul components read the custom name through CONSUL_LOGIN_AUTH_METHOD and the server-acl-init job now respects a pre-configured method rather than overwriting it. That unblocks multi-dataplane and multi-environment deployments that previously had to s...
Add GCP CIS benchmark policies for IAM, network, and compute hashicorp/prewritten-terraform-policy-library
Seventeen GCP CIS benchmark policies land across IAM (service account admin privileges, primitive project roles, service account and KMS role separation), network (default and legacy networks, SSH and RDP exposure, VPC Flow Logs), and compute (default service accounts and scopes, project-wide SSH keys, serial-port access, IP forwarding, Shielded VMs, public IPs), each with policytest.hcl tests ...
[VAULT-48659] docs: add Oracle plugin compatibility and Vault support matrix hashicorp/web-unified-docs
The Oracle plugin overview gains a compatibility matrix in the Vault v1.21.x and v2.x docs covering tested Oracle Instant Client families for Enterprise plugin releases 0.11.0+ent through 0.14.1+ent, and separates exact tested versions from untested 19.x combinations.
feat(metrics): add support for multiple service metrics endpoints annotation hashicorp/consul-k8s
Consul-k8s now accepts multiple service metrics endpoints through an annotation, so a single service can expose more than one scrape target. There is no changelog entry or test checkbox yet on the PR.
Bump the gomod-backward-compatible group across 1 directory with 12 updates hashicorp/vault-secrets-operator
The rest is routine: a Dependabot group bump of 12 Go modules in vault-secrets-operator (including cloud.google.com/go/compute/metadata 0.9.0 to 0.9.1 and github.com/onsi/gomega 1.42.1 to 1.43.1), minor consul and consul-k8s changes, and the tfc-agent 1.32.0 GA docs update.
