Current Series Release Notes

5.7.0-7

New Features

• Added token-based auth method support to the Vault key manager. A new [vault] auth_method option (choices: approle, jwt and kubernetes; default: approle) controls how castellan authenticates with Vault. The jwt and kubernetes methods read a JWT from a file and present it to a Vault auth backend. An optional auth_path option allows overriding the auth backend mount path when it differs from the default (e.g. kubernetes-my-cluster instead of kubernetes). New [vault] config options: auth_method, token_role, token_file, and auth_path. The root_token_id option continues to take priority over any configured auth method when set.

Upgrade Notes

• Support for Python 3.10 has been dropped. The minimum version of Python now supported is 3.11.

5.7.0

Deprecation Notes

• The castellan.__version__ attribute has been deprecated for removal. Prefer use of importlib.metadata to inspect version information for installed packages.