harp

Secret management by contract toolchain

APACHE-2.0 License

Stars
145
Committers
4
View Code on GitHub
Ecosystems: YAML, Go, elasticsearch, Kubernetes

Bot releases are hidden (Show)

harp - v0.2.11 Latest Release

Published by fin09pcap about 1 year ago

What's Changed

Full Changelog: https://github.com/elastic/harp/compare/v0.2.10...v0.2.11

harp -

Published by Zenithar over 2 years ago

harp - v0.2.9

Published by Zenithar over 2 years ago

0.2.9

2022-03-13

BREAKING-CHANGES:

  • FIPS artifacts are disabled by default on GitHub Actions CI but still can be
    built locally.
  • harp-artifacts containing all harp binaries will not be produced anymore.

FEATURES:

  • cli/lint:

    • Provide command to Lint YAML/JSON content for Bundle, BundleTemplate, RuleSet and BundlePatch. #138

  • cli/render:

    • Generate a configuration file system from an archive. #149

  • cli/template:

    • Support archive as file loader.

  • sdk/api:

    • Bundle, BundleTemplate, RuleSet and BundlePatch JSON schema are published. #138
    • JSON Schema for all configuration files. #145

  • sdk/crate:

    • A crate is an OCI Compatible image which can be pushed to OCI compliant
      registries.
    • crate push is used to prepare a crate with a sealed container and
      optionally an archive - OCI Push #138
    • This is used to publish the sealed container and the templates used to
      render the final configuration.
    • crate copy is used to retrieve a remote crate from a registry. #147

DIST:

  • docker:
    • Multi-architecture docker images are produced.

What's Changed

Full Changelog: https://github.com/elastic/harp/compare/v0.2.8...v0.2.9

harp - v0.2.8

Published by Zenithar over 2 years ago

FEATURES:

  • cli:
    • darwin-amd64 and darwin-arm64 are code signed and notarized using an Apple Developer ID certificate to allow harp execution on Silicon M1 based computers. #134
  • cli/transform:
    • compress/decompress commands for various algorithms. #117
    • hash/multihash command for various hashing algorithms. #117
    • encode/decode command for various encoding strategies #117
  • bundle/ruleset:
    • enable rego language for RuleSet constraint engine. #134
  • sdk/api:
    • support user_data for Bundle, Package, SecretChain to store custom arbitrary data during pipeline execution. #134
  • sdk/value:
    • encoding reader / writer factory. #117
    • compression reader/writer factory. #117
    • hash writer factory. #117

CHANGES:

  • go:
    • FIPS artifact build process is disabled.
  • git:
    • the tag cmd/harp/vX.XX will never be produced.
  • ci:
    • dependabot setup to monitor and automate dependency updates.
    • the release pipeline has been completely redesigned to use goreleaser.
    • SLSA provenance is temporary disabled due to a lack of the multiplatform support for the used action.

DIST:

  • build/ci:
    • SHA256 fingerprint is provided per artifact.
    • SBOM is embedded in the artifact archive.
  • build/gha:

Full Changelog: https://github.com/elastic/harp/compare/v0.2.7...v0.2.8

harp -

Published by Zenithar over 2 years ago

FEATURES:

  • bundle/from:
    • read a HCL bundle descriptor to generate the binary bundle. #114
  • bundle/patch:
    • support --stop-at-rule-index=<int> and --stop-at-rule-id=<string> flags for bundle patch to stop patch evaluation before requested rule identifier or index. #112
    • --ignore-rule-id and --ignore-rule-index flags to ignore matching rules during bundle patch evaluation. #112
  • bundle/selector:
    • support regoFile to load a Rego filter policy from a file. #111
    • cel query language #111
      • p.match_label(globstring, globstring) can be used to match label key and value
      • p.match_annotation(globstring, globstring) can be used to match annotation key and value

DIST:

  • go: Build with Golang 1.17.7.
  • go-boring: Build with Golang 1.17.7b7.
harp - cmd/harp/v0.2.7

Published by Zenithar over 2 years ago

What's Changed

Full Changelog: https://github.com/elastic/harp/compare/v0.2.6...cmd/harp/v0.2.7

harp - v0.2.6

Published by Zenithar over 2 years ago

What's Changed

Full Changelog: https://github.com/elastic/harp/compare/v0.2.5...v0.2.6

harp - cmd/harp/v0.2.6

Published by Zenithar over 2 years ago

2022-02-07

FEATURES:

  • template/engine:
    • isodate time formatter to RFC3389 date format.
  • bundle/pipeline:
    • Support custom input reader and output writer. #105
  • bundle/selector:
    • support glob for package path and secret key matcher. #110
    • support rego policy for bunde filter command and BundlePatch selector. #106
    • support cel expressions used in BundleRuleSet for package matchers in bundle filter command and BundlePatch selector. #109
  • sdk/value:
    • support age encryption as value transformer. #102
    • support deterministic authenticated encryption value transformers. #103
    • support additional data for AEAD/DAE transformers. #104
    • DAE transformers can be initialized using an optional salt to derive different keys from the transformer key. #104

DIST

  • go: Build with Golang 1.17.6.
  • build/ci
    • Add SLSA Level 1 - Provenance generation step for binaries.
    • Add Snyk as code / dependencies scanner via SARIF.
    • Add Trivy dependencies scanner via SARIF.

Full Changelog: https://github.com/elastic/harp/compare/v0.2.5...cmd/harp/v0.2.6

harp - v0.2.5

Published by Zenithar over 2 years ago

What's Changed

Full Changelog: https://github.com/elastic/harp/compare/v0.2.4...v0.2.5

harp -

Published by Zenithar over 2 years ago

harp - v0.2.4

Published by Zenithar almost 3 years ago

What's Changed

Full Changelog: https://github.com/elastic/harp/compare/v0.2.3...v0.2.4

harp -

Published by Zenithar almost 3 years ago

Changes

  • Use Go 1.17.5 (std + goboring)
  • Github actions automation for release process
harp - v0.2.3

Published by Zenithar almost 3 years ago

What's Changed

Full Changelog: https://github.com/elastic/harp/compare/v0.2.2...v0.2.3

harp -

Published by Zenithar almost 3 years ago

harp - v0.2.2

Published by Zenithar almost 3 years ago

What's Changed

Full Changelog: https://github.com/elastic/harp/compare/v0.2.1...v0.2.2

harp -

Published by Zenithar almost 3 years ago

2021-11-24

CHANGES:

  • cso/v1: Support new Azure and IBM regions. #84
harp - v0.2.1

Published by Zenithar almost 3 years ago

What's Changed

Full Changelog: https://github.com/elastic/harp/compare/v0.2.0...v0.2.1

harp - cmd/harp/v0.2.1

Published by Zenithar almost 3 years ago

2021-11-17

BREAKING-CHANGES:

  • cmd/ruleset: Ruleset generation from a Bundle has been relocated to to ruleset command. #77
  • bundle/filter: parameter --jmespath as been renamed to --query. #77
  • bundle/dump: parameter --jmespath as been renamed to --query. #77
  • deprecation: package github.com/elastic/harp/pkg/bundle/vfs has been removed. The Golang 1.16 fs.FS implementation must be used and located at github.com/elastic/harp/pkg/bundle/fs. #77
  • container/identity: identities are using ed25519 key pairs vs x25519 keys in previous versions. For conversion, you can still unseal a container using old x25519 key based identities, but you can't seal with them. To be future-proof, you have to regenerate new identities. #79
  • sdk/transformer: Encryption transformers must be imported to be registered in the encryption transformer registry. #80

FEATURES:

  • bundle/encryption: Partial bundle encryption based on annotations. #77
  • task/bundle: Fully unit tested. #77
  • core/kv: Support KV Store publication for Etcd3/Zookeeper/Consul. #77
  • value/transformer: Transformer mock is available for testing. #77
  • value/encryption: Expose encryption.Must(value.Transformer, error) to build a transformer instance with a panic raised on error. #77
  • sdk/cmdutil: DiscardWriter() is a io.Writer provider used to discard all output. #77
  • sdk/cmdutil: DirectWriter(io.Writer) is a io.Writer provider used to delegate to input writer. #77
  • sdk/cmdutil: NewClosedWriter() is a io.Writer implementation who always return on Write() calls. #77
  • pkg/kv: integration tests and behavior validation test suite. #78
  • value/transformers: expose new JWE based encryption transformers #80
    • jwe:a128kw:<base64> to initialize a AES128 Key Wrapper with AES128 GCM Encryption transformer
    • jwe:a192kw:<base64> to initialize a AES192 Key Wrapper with AES192 GCM Encryption transformer
    • jwe:a256kw:<base64> to initialize a AES256 Key Wrapper with AES256 GCM Encryption transformer
    • jwe:pbes2-hs256-a128kw:<ascii> to initialize a PBES2 key derivation function for AES128 key wrapping with AES128 GCM Encryption transformer
    • jwe:pbes2-hs384-a192kw:<ascii> to initialize a PBES2 key derivation function for AES192 key wrapping with AES192 GCM Encryption transformer
    • jwe:pbes2-hs512-a256kw:<ascii> to initialize a PBES2 key derivation function for AES256 key wrapping with AES256 GCM Encryption transformer
  • sdk/transformer: Encryption transformer dynamic factory. #80
    • Use pkg/value/encryption.Register(prefix, factory) to register a transformer factory matching the given prefix.
  • bundle/prefixer: parameter --remove added to support prefix removal operation. #81
  • to/object: support toml format as output. #81
  • value/transformer: Support PASETO v4.local transformer. #82

CHANGES:

  • container/identity: converge to value.Transformer usage for identity protection. #81
  • container/recover: converge to value.Transformer usage for container key recovery from an identity. #81
  • sdk/types: IsNil() now recognize nil function pointer. #77
  • sdk/dep: #79
    • github.com/google/gops v0.3.22
    • github.com/gosimple/slug v1.11.2
    • github.com/hashicorp/consul/api v1.11.0
    • github.com/hashicorp/vault/api v1.3.0
    • github.com/zclconf/go-cty v1.10.0
    • go.step.sm/crypto v0.13.0
    • golang.org/x/crypto v0.0.0-20211108221036-ceb1ce70b4fa
    • golang.org/x/sys v0.0.0-20211113001501-0c823b97ae02
    • google.golang.org/genproto v0.0.0-20211112145013-271947fe86fd
    • google.golang.org/grpc v1.42.0

DIST:

  • go: Build with Golang 1.17.3.
  • tools: Update golangci-lint to v1.43.0. #76
  • docs: General review for typo / grammar.
harp - v0.2.0

Published by Zenithar almost 3 years ago

What's Changed

Full Changelog: https://github.com/elastic/harp/compare/v0.1.24...v0.2.0

harp - cmd/harp/v0.2.0

Published by Zenithar almost 3 years ago

0.2.0

2021-10-26

BREAKING-CHANGES:

  • Metadata storage has been modified to support a JSON level complexity. All plugins must align their metadata management to the new format.
  • Legacy metadata format is converted to new format on read.

DIST:

  • go: Build with Golang 1.17.2.
  • homebrew: Approriate harp version can be installed according to your platform architecture and OS #71

CHANGES:

  • core/vault: Replace json encoded metadata in secret data by a JSON object. #68
  • crypto/pem: Delegate PEM encoding/decoding to go.step.sm/crypto #73

FEATURES:

  • to/vault: Support Vault >1.9 custom metadata for bundle metadata publication. #68
  • from/vault: Support Vault >1.9 custom metadata for bundle metadata retrieval. #68
  • from/vault: Support legacy bundle metadata format. #69
  • template/engine: jsonEscape / jsonUnescape is added to handle string escaping using JSON character escaping strategy #70
  • template/engine: unquote is added to unquote a quote escaped string. #70
  • bundle/prefixer: Globally add a prefix to all secret package. #74
  • plugin/kv: Promote harp-kv as builtin. #75
Package Rankings
Top 3.71% on Proxy.golang.org
Badges
Extracted from project README
License Go Report Card made-with-Go GitHub release Maintenance
Related Projects
envconsul

Launch a subprocess with environment variables using data from @HashiCorp Consul and Vault.

13 May 2014 2,006
Templates

100+ DevOps Code & Config templates for Kubernetes, AWS, GCP, Terraform, Docker, Packer, Jenkins,...

16 Sep 2020 117
opsilon

A customizable CLI for collaboratively running container-native workflows

09 Nov 2022 9
bank-vaults

A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret en...

07 Mar 2018 2,025
golang-deployment

Kubernetes Deployment for Simple Golang API (Bookstore) --- Mirror Repository from GitHub, GitLab...

17 Apr 2022 30
ko-copy

09 Jun 2022 0
harp-plugins

Harp Plugins - It uses Harp SDK to provide new features to your secret management pipelines.

06 Feb 2021 2