Aerospike Secret Agent release notes
Secret Agent 1.3.0
March 2, 2026 | Download
Breaking changes
- Artifact names no longer include the distribution. You may need to update scripts that parse package names.
Security updates
- Vulnerability fixes: Use
service.httpswith TLS so that secrets and metrics are not sent in the clear. Use HTTP only for local or trusted networks. [TOOLS-3273]
New features
- Secret Agent can now expose a REST interface for fetching secrets over HTTP or HTTPS, in addition to the existing TCP and UDS binary protocol. See Configure HTTP and HTTPS. [TOOLS-3043]
- Packages are no longer tied to a specific distribution, and package filenames use version and architecture only. See Install Secret Agent. [TOOLS-3101]
Bug fixes
- Secret Agent validates the resource string even when single resource is present in Secret Agent config. See URL base path validation. [TOOLS-3081]
- HTTP/HTTPS listeners validate custom
url-base-pathvalues at startup and reject invalid paths. Add trace message when HTTP/HTTPS listener is started. See Configure HTTP and HTTPS. [TOOLS-3160]
Secret Agent 1.2.3
January 17, 2025 | Download
Security
- Fix Denial of Service (DoS). [TOOLS-3001]
- Fix incorrect implementation of authentication algorithm. [TOOLS-3002]
Secret Agent 1.2.2
July 08, 2024 | Download
Security
- Updated golang libraries to fix security vulnerabilities. [TOOLS-2889]
Secret Agent 1.2.1
February 13, 2024 | Download
Bug Fixes
- Check for exact match of secret key name in the resource path in GCP. [TOOLS-2845]
Security
- Updated golang libraries to fix security vulnerabilities. [TOOLS-2828, TOOLS-2829, TOOLS-2830]
Secret Agent 1.2.0
November 20, 2023 | Download
New Features
- Add HashiCorp Vault support to Secret Agent. [TOOLS-2719]
- Secret Agent picks environment variables from
/etc/environmentfile. [TOOLS-2764]
Secret Agent 1.1.1
October 31, 2023 | Download
Bug Fixes
- Updated golang libraries to fix security vulnerabilities. [TOOLS-2713]
Secret Agent 1.1.0
September 29, 2023 | Download
Deprecation
- ‘ARNs’ under ‘aws’ secret manager is now deprecated. Users should use ‘resources’ instead.
New Features
- Added support for GCP secret manager. [TOOLS-2676]
- Added support for mutual TLS (mTLS). [TOOLS-2678]
- Exposing metrics via Prometheus endpoint and log ticker.
Secret Agent 1.0.0
August 03, 2023 | Download
- Initial release of the Aerospike Secret Agent, an independent process that fetches secrets from external secret managers like AWS Secrets Manager.