Aerospike Secret Agent release notes

For the complete documentation index see: llms.txt

All documentation pages available in markdown.

Secret Agent 1.4.0

June 23, 2026 | Download

New features

Secret Agent can route outbound connections to AWS Secrets Manager, GCP Secret Manager, and HashiCorp Vault through a corporate HTTP or HTTPS proxy, including proxies that require a private CA or mutual TLS (mTLS). Configure a proxy block per secret manager backend or use HTTP_PROXY / HTTPS_PROXY environment variables. Proxy connection metrics are available on the Prometheus endpoint. See Configure a proxy. [TOOLS-3042]
Secret Agent supports AppRole authentication for HashiCorp Vault using role-id and secret-id-file. See HashiCorp Vault. [TOOLS-3310]
Added --version and -version flags to print the installed Secret Agent version (requires --config-file).
Docker images are built for amd64 and arm64. [TOOLS-3582]

Improvements

Docker container base image updated to Ubuntu 24.04. [TOOLS-2911]
Updated RPM package naming for compatibility with Artifactory. [TOOLS-3715]
Updated AWS SDK, HashiCorp Vault API, and other dependencies.

Secret Agent 1.3.1

May 13, 2026 | Download

Security updates

Fix security vulnerabilities. [TOOLS-3543]

Secret Agent 1.3.0

March 2, 2026 | Download

Breaking changes

Artifact names no longer include the distribution. You may need to update scripts that parse package names.

Security updates

Vulnerability fixes: Use service.https with TLS so that secrets and metrics are not sent in the clear. Use HTTP only for local or trusted networks. [TOOLS-3273]

New features

Secret Agent can now expose a REST interface for fetching secrets over HTTP or HTTPS, in addition to the existing TCP and UDS binary protocol. See Configure HTTP and HTTPS. [TOOLS-3043]
Packages are no longer tied to a specific distribution, and package filenames use version and architecture only. See Install Secret Agent. [TOOLS-3101]

Bug fixes

Secret Agent validates the resource string even when single resource is present in Secret Agent config. See URL base path validation. [TOOLS-3081]
HTTP/HTTPS listeners validate custom url-base-path values at startup and reject invalid paths. Add trace message when HTTP/HTTPS listener is started. See Configure HTTP and HTTPS. [TOOLS-3160]

Secret Agent 1.2.3

January 17, 2025 | Download

Security

Fix Denial of Service (DoS). [TOOLS-3001]
Fix incorrect implementation of authentication algorithm. [TOOLS-3002]

Secret Agent 1.2.2

July 08, 2024 | Download

Security

Updated golang libraries to fix security vulnerabilities. [TOOLS-2889]

Secret Agent 1.2.1

February 13, 2024 | Download

Bug Fixes

Check for exact match of secret key name in the resource path in GCP. [TOOLS-2845]

Security

Updated golang libraries to fix security vulnerabilities. [TOOLS-2828, TOOLS-2829, TOOLS-2830]

Secret Agent 1.2.0

November 20, 2023 | Download

New Features

Add HashiCorp Vault support to Secret Agent. [TOOLS-2719]
Secret Agent picks environment variables from /etc/environment file. [TOOLS-2764]

Secret Agent 1.1.1

October 31, 2023 | Download

Bug Fixes

Updated golang libraries to fix security vulnerabilities. [TOOLS-2713]

Secret Agent 1.1.0

September 29, 2023 | Download

Deprecation

‘ARNs’ under ‘aws’ secret manager is now deprecated. Users should use ‘resources’ instead.

New Features

Added support for GCP secret manager. [TOOLS-2676]
Added support for mutual TLS (mTLS). [TOOLS-2678]
Exposing metrics via Prometheus endpoint and log ticker.

Secret Agent 1.0.0

August 03, 2023 | Download

Initial release of the Aerospike Secret Agent, an independent process that fetches secrets from external secret managers like AWS Secrets Manager.