kapitan

• Do not escape forward slashes in json.dump (#92)
• sha256 jsonnet function (#94)

• Fix for #81
• Clearer message for version check (#82)
• Support for jinja2 'do' extension (#89)

• Updated reclass
• (https://github.com/deepmind/kapitan/pull/78) Support for creating a target secret on compile time, if the secret does not already exist:

?{gpg:path/to/new_secret|randomstr:32}

If path/to/new_secret does not exist under secrets_path it evaluates randomstr:32, which returns a 32 byte-log random string generated by secrets.token_urlsafe and creates the secret with its content.

• (https://github.com/deepmind/kapitan/pull/79) Support for YAML C bindings to improve compilation performance.

If you're using the pip version of Kapitan, you can benefit from YAML C bindings support by running:

Linux: sudo apt-get install python3-yaml
Mac: brew install libyaml

• Updates to deepmind/kapitan:ci Docker image
• kapitan secrets --write and kapitan secrets --update-targets are now consistent in terms of the recipients list #67
• Significant performance improvement to kapitan compile #71
• kapitan compile now writes the version to .kapitan and future executions will check if the last used kapitan version is <= than the current kapitan version, to keep compilations consistent. You can skip version check by doing kapitan compile --ignore-version-check. For more info see #57 and #72

• Kapitan now requires python 3.6
• Fixed dockerfile to ensure delegated volumes (#47)
• Fixed missing target compiled directory
• Target compilation error improvements (#62)
• gnupg updated to 0.4.2
• Inventory target pattern command parsing improvements

• Added --pattern feature to inventory cli (https://github.com/deepmind/kapitan/issues/41)
• now using python3 lru_cache instead of memoize
• fixed searchvar (https://github.com/deepmind/kapitan/issues/40)

• moved to python 3 (python 2 should still work but no longer supported)
• updated to jsonnet v0.10.0
• new yaml jinja2 filter
• target secrets support (https://github.com/deepmind/kapitan/pull/36)
• more tests

• Supports compiling specific targets
• Breaking change: non inventory target files are gone

• Supports reading targets from the inventory as well as target files
• Breaking change: the keys in compile items changed, see https://github.com/deepmind/kapitan/pull/22

• checks for gpg key expiry
• allow base64 encoding content for secrets
• support for revealing files in directories

• fixes a bug that overwrites the output_path if it is set to '.'

• breaking change: the compile command will compile all targets found (https://github.com/deepmind/kapitan/pull/16)
• log/print friendlier error messages avoiding tracebacks for known failure behaviours (https://github.com/deepmind/kapitan/pull/15) (fixes https://github.com/deepmind/kapitan/issues/11)

• gpg secrets support
• compiled secret tags
• new --reveal flag for compile sub-command
• new --no-verify for secrets sub-command
• new yaml_dump() native jsonnet function

• Documentation Improvements
• New --version flag
• Now using jsonnet 0.9.5
• inventory_global in jinja and jsonnet
• Packaged lib/kapitan.libjsonnet