Python hvac

BACKWARDS COMPATIBILITY NOTICE:

• The Client() class constructor now behaves similarly to Vault CLI in that it uses the VAULT_ADDR environmental variable for the Client URL when that variable is set. Along the same lines, when no token is passed into the Client() constructor, it will attempt to load a token from the VAULT_TOKEN environmental variable or the ~/.vault-token file where available. GH-411

IMPROVEMENTS:

• Support for the Kubernetes auth method. GH-408

BUG FIXES:

• Fix for comparision recovery_threshold and recovery_shares during initialization. GH-398
• Fix request method for AWS secrets engine generate_credentials() method. GH-403
• Fix request parameter (n_bytes -> bytes) for Transit secrets engine generate_random_bytes() method. GH-377

Thanks to @engstrom, @viralpoetry, @bootswithdefer, @steved, @kserrano, @spbsoluble, @uepoch, @singuliere, @frgaudet, @jsporna, & @mrsiesta for their lovely contributions.

IMPROVEMENTS:

• Support for the AWS secrets engine. GH-370

BUG FIXES:

• Fixes for intermittent test case failures. GH-361 & GH-364

MISCELLANEOUS:

• Travis CI builds now run against Python 3.7 (along side the previously tested 2.7 and 3.6 versions). GH-360
• Documentation build test case added. GH-366
• Module version now managed by the bumpversion utility exclusively. GH-369

IMPROVEMENTS:

• Support for the Okta auth method. GH-341

BUG FIXES:

• Simplify redirect handling in Adapter class to fix issues following location headers with fully qualified URLs. Note: hvac now converts // to / within any paths. GH-348
• Fixed a bug where entity and group member IDs were not being passed in to Identity secrets engine group creation / updates. GH-346
• Ensure all types of responses for the read_health_status() system backend method can be retrieved without exceptions being raised. GH-347
• Fix read_seal_status() in Client class’s seal_status property. GH-354

DOCUMENTATION UPDATES:

• Example GCP auth method login() call with google-api-python-client usage added: Example with google-api-python-client Usage. GH-350

MISCELLANEOUS:

• Note: Starting after release 0.7.0, develop is the main integration branch for the hvac project. The master branch is now intended to capture the state of the most recent release.
• Test cases for hvac are no longer included in the release artifacts published to PyPi. GH-334
• The create_or_update_policy system backend method now supports a “pretty_print” argument for different JSON formatting. This allows create more viewable policy documents when retrieve existing policies (e.g., from within the Vault UI interface). GH-342
• Explicit support for Vault v0.8.3 dropped. CI/CD tests updated to run against Vault v1.0.0. GH-344

DEPRECATION NOTICES:

• All auth method classes are now accessible under the auth property on the hvac.Client class. GH-310. (E.g. the github, ldap, and mfa Client properties’ methods are now accessible under Client.auth.github, etc.)
• All secrets engines classes are now accessible under the secrets property on the hvac.Client class. GH-311 (E.g. the kv, Client property’s methods are now accessible under Client.secrets.kv)
• All system backend classes are now accessible under the sys property on the hvac.Client class. GH-314 ([GH-314] through [GH-325]) E.g. methods such as enable_secret_backend() under the Client class are now accessible under Client.sys.enable_secrets_engine(), etc.

IMPROVEMENTS:

• Support for Vault Namespaces. GH-268
• Support for the Identity secrets engine. GH-269
• Support for the GCP auth method. GH-240
• Support for the Azure auth method. GH-286
• Support for the Azure secrets engine. GH-287
• Expanded Transit secrets engine support. GH-303

Thanks to @tiny-dancer, @jacquat, @deejay1, @MJ111, @jasonarewhy, and @alexandernst for their lovely contributions.

IMPROVEMENTS:

• New KV secret engine-related classes added. See the KV documentation under hvac’s readthedocs.io site for usage / examples. GH-257 / GH-260

MISCELLANEOUS:

• Language classifiers are now being included with the distribution. GH-247
• Token no longer being sent in URL path for the Client.renew_token method. GH-250
• Support for the response structure in newer versions of Vault within the Client.get_policy method. GH-254
• config and plugin_name parameters added to the Client.enable_auth_backend method. GH-253

Thanks to @ijl, @rastut, @seuf, @downeast for their lovely contributions.