Skip to content

Aerospike Secret Agent release notes

For the complete documentation index see: llms.txt

All documentation pages available in markdown.

Secret Agent 1.4.0

June 23, 2026  |  Download

New features

  • Secret Agent can route outbound connections to AWS Secrets Manager, GCP Secret Manager, and HashiCorp Vault through a corporate HTTP or HTTPS proxy, including proxies that require a private CA or mutual TLS (mTLS). Configure a proxy block per secret manager backend or use HTTP_PROXY / HTTPS_PROXY environment variables. Proxy connection metrics are available on the Prometheus endpoint. See Configure a proxy. [TOOLS-3042]
  • Secret Agent supports AppRole authentication for HashiCorp Vault using role-id and secret-id-file. See HashiCorp Vault. [TOOLS-3310]
  • Added --version and -version flags to print the installed Secret Agent version (requires --config-file).
  • Docker images are built for amd64 and arm64. [TOOLS-3582]

Improvements

  • Docker container base image updated to Ubuntu 24.04. [TOOLS-2911]
  • Updated RPM package naming for compatibility with Artifactory. [TOOLS-3715]
  • Updated AWS SDK, HashiCorp Vault API, and other dependencies.

Secret Agent 1.3.1

May 13, 2026  |  Download

Security updates

  • Fix security vulnerabilities. [TOOLS-3543]

Secret Agent 1.3.0

March 2, 2026  |  Download

Breaking changes

  • Artifact names no longer include the distribution. You may need to update scripts that parse package names.

Security updates

  • Vulnerability fixes: Use service.https with TLS so that secrets and metrics are not sent in the clear. Use HTTP only for local or trusted networks. [TOOLS-3273]

New features

  • Secret Agent can now expose a REST interface for fetching secrets over HTTP or HTTPS, in addition to the existing TCP and UDS binary protocol. See Configure HTTP and HTTPS. [TOOLS-3043]
  • Packages are no longer tied to a specific distribution, and package filenames use version and architecture only. See Install Secret Agent. [TOOLS-3101]

Bug fixes

  • Secret Agent validates the resource string even when single resource is present in Secret Agent config. See URL base path validation. [TOOLS-3081]
  • HTTP/HTTPS listeners validate custom url-base-path values at startup and reject invalid paths. Add trace message when HTTP/HTTPS listener is started. See Configure HTTP and HTTPS. [TOOLS-3160]

Secret Agent 1.2.3

January 17, 2025  |  Download

Security

  • Fix Denial of Service (DoS). [TOOLS-3001]
  • Fix incorrect implementation of authentication algorithm. [TOOLS-3002]

Secret Agent 1.2.2

July 08, 2024  |  Download

Security

  • Updated golang libraries to fix security vulnerabilities. [TOOLS-2889]

Secret Agent 1.2.1

February 13, 2024  |  Download

Bug Fixes

  • Check for exact match of secret key name in the resource path in GCP. [TOOLS-2845]

Security

  • Updated golang libraries to fix security vulnerabilities. [TOOLS-2828, TOOLS-2829, TOOLS-2830]

Secret Agent 1.2.0

November 20, 2023  |  Download

New Features

  • Add HashiCorp Vault support to Secret Agent. [TOOLS-2719]
  • Secret Agent picks environment variables from /etc/environment file. [TOOLS-2764]

Secret Agent 1.1.1

October 31, 2023  |  Download

Bug Fixes

  • Updated golang libraries to fix security vulnerabilities. [TOOLS-2713]

Secret Agent 1.1.0

September 29, 2023  |  Download

Deprecation

  • ‘ARNs’ under ‘aws’ secret manager is now deprecated. Users should use ‘resources’ instead.

New Features

  • Added support for GCP secret manager. [TOOLS-2676]
  • Added support for mutual TLS (mTLS). [TOOLS-2678]
  • Exposing metrics via Prometheus endpoint and log ticker.

Secret Agent 1.0.0

August 03, 2023  |  Download

  • Initial release of the Aerospike Secret Agent, an independent process that fetches secrets from external secret managers like AWS Secrets Manager.