---
title: "Aerospike Secret Agent release notes"
description: "Aerospike Secret Agent release notes for versions 1.0.0 to 1.4.0, including security updates and new features."
---

# Aerospike Secret Agent release notes

> For the complete documentation index see: [llms.txt](https://aerospike.com/docs/llms.txt)
> 
> All documentation pages available in markdown.

## Secret Agent 1.4.0

June 23, 2026  |  [**Download**](https://aerospike.com/download/oandm/secret_agent/)

### New features

-   Secret Agent can route outbound connections to AWS Secrets Manager, GCP Secret Manager, and HashiCorp Vault through a corporate HTTP or HTTPS proxy, including proxies that require a private CA or mutual TLS (mTLS). Configure a `proxy` block per secret manager backend or use `HTTP_PROXY` / `HTTPS_PROXY` environment variables. Proxy connection metrics are available on the Prometheus endpoint. See [Configure a proxy](https://aerospike.com/docs/database/tools/secret-agent/proxy). \[TOOLS-3042\]
-   Secret Agent supports [AppRole authentication](https://developer.hashicorp.com/vault/docs/auth/approle) for HashiCorp Vault using `role-id` and `secret-id-file`. See [HashiCorp Vault](https://aerospike.com/docs/database/tools/secret-agent/secret-manager/vault#approle-authentication). \[TOOLS-3310\]
-   Added `--version` and `-version` flags to print the installed Secret Agent version (requires `--config-file`).
-   Docker images are built for `amd64` and `arm64`. \[TOOLS-3582\]

### Improvements

-   Docker container base image updated to Ubuntu 24.04. \[TOOLS-2911\]
-   Updated RPM package naming for compatibility with Artifactory. \[TOOLS-3715\]
-   Updated AWS SDK, HashiCorp Vault API, and other dependencies.

---

## Secret Agent 1.3.1

May 13, 2026  |  [**Download**](https://aerospike.com/download/oandm/secret_agent/)

### Security updates

-   Fix security vulnerabilities. \[TOOLS-3543\]

---

## Secret Agent 1.3.0

March 2, 2026  |  [**Download**](https://aerospike.com/download/oandm/secret_agent/)

### Breaking changes

-   Artifact names no longer include the distribution. You may need to update scripts that parse package names.

### Security updates

-   Vulnerability fixes: Use `service.https` with TLS so that secrets and metrics are not sent in the clear. Use HTTP only for local or trusted networks. \[TOOLS-3273\]

### New features

-   Secret Agent can now expose a REST interface for fetching secrets over HTTP or HTTPS, in addition to the existing TCP and UDS binary protocol. See [Configure HTTP and HTTPS](https://aerospike.com/docs/database/tools/secret-agent/listener/http). \[TOOLS-3043\]
-   Packages are no longer tied to a specific distribution, and package filenames use version and architecture only. See [Install Secret Agent](https://aerospike.com/docs/database/tools/secret-agent/install). \[TOOLS-3101\]

### Bug fixes

-   Secret Agent validates the resource string even when single resource is present in Secret Agent config. See [URL base path validation](https://aerospike.com/docs/database/tools/secret-agent/listener/http#url-base-path-validation). \[TOOLS-3081\]
-   HTTP/HTTPS listeners validate custom `url-base-path` values at startup and reject invalid paths. Add trace message when HTTP/HTTPS listener is started. See [Configure HTTP and HTTPS](https://aerospike.com/docs/database/tools/secret-agent/listener/http). \[TOOLS-3160\]

---

## Secret Agent 1.2.3

January 17, 2025  |  [**Download**](https://aerospike.com/download/oandm/secret_agent/)

### Security

-   Fix Denial of Service (DoS). \[TOOLS-3001\]
-   Fix incorrect implementation of authentication algorithm. \[TOOLS-3002\]

---

## Secret Agent 1.2.2

July 08, 2024  |  [**Download**](https://aerospike.com/download/oandm/secret_agent/)

### Security

-   Updated golang libraries to fix security vulnerabilities. \[TOOLS-2889\]

---

## Secret Agent 1.2.1

February 13, 2024  |  [**Download**](https://aerospike.com/download/oandm/secret_agent/)

### Bug Fixes

-   Check for exact match of secret key name in the resource path in GCP. \[TOOLS-2845\]

### Security

-   Updated golang libraries to fix security vulnerabilities. \[TOOLS-2828, TOOLS-2829, TOOLS-2830\]

---

## Secret Agent 1.2.0

November 20, 2023  |  [**Download**](https://aerospike.com/download/oandm/secret_agent/)

::: note
This release removes support for Debian 10.
:::

### New Features

-   Add HashiCorp Vault support to Secret Agent. \[TOOLS-2719\]
-   Secret Agent picks environment variables from `/etc/environment` file. \[TOOLS-2764\]

---

## Secret Agent 1.1.1

October 31, 2023  |  [**Download**](https://aerospike.com/download/oandm/secret_agent/)

### Bug Fixes

-   Updated golang libraries to fix security vulnerabilities. \[TOOLS-2713\]

---

## Secret Agent 1.1.0

September 29, 2023  |  [**Download**](https://aerospike.com/download/oandm/secret_agent/)

### Deprecation

-   ‘ARNs’ under ‘aws’ secret manager is now deprecated. Users should use ‘resources’ instead.

### New Features

-   Added support for GCP secret manager. \[TOOLS-2676\]
-   Added support for mutual TLS (mTLS). \[TOOLS-2678\]
-   Exposing metrics via Prometheus endpoint and log ticker.

---

## Secret Agent 1.0.0

August 03, 2023  |  [**Download**](https://aerospike.com/download/oandm/secret_agent/)

-   Initial release of the Aerospike Secret Agent, an independent process that fetches secrets from external secret managers like [AWS Secrets Manager](https://aws.amazon.com/secrets-manager/).