New Lair!

We've just migrated tools, so bear with us while we put the Ronin's scrolls of knowledge back in order.

Hashicorp Vault 0.11 Released Today

Hashicorp announced the release of Vault 0.11 today on their blog.  The latest version introduces several new features, the most intriguing of which is a client agent mode.  Vault client runs as a daemon and automatically rotates tokens for local applications.  This means your long-running apps that use consul-template or envconsul with Vault will recover gracefully on their next restart, or you'll know there's a token refresh problem before that happens.  Dear friends with a crusty old Jenkins instance you haven't rebooted in 18 months, this feature is for you!

There is one other exciting feature available in open-source Vault: ACL templates.  Buried under the mundanity of its name, ACL templates enable more granularity in Role-Based Access Control (RBAC).  For organizations fighting the good fight to lash their authentication to one identity provider, this will be extremely helpful.  Vault Enterprise has correctly reserved some luxury features, including Namespaces, Performance Standby Nodes, and some UI Controls.  Although I will miss these deluxe features in the open source version, I'm happy to see Hashi adopting this strategy.  These features will appeal to large or highly-customized shops with the budget for Vault licenses.