conjur-api 5.3.0 → 5.3.5

Sign up to get free protection for your applications and to get access to all the features.
Files changed (63) hide show
  1. checksums.yaml +4 -4
  2. data/.codeclimate.yml +10 -0
  3. data/.github/CODEOWNERS +10 -0
  4. data/.github/ISSUE_TEMPLATE/bug.md +42 -0
  5. data/.github/ISSUE_TEMPLATE/feature_request.md +27 -0
  6. data/.github/PULL_REQUEST_TEMPLATE.md +21 -0
  7. data/.gitignore +1 -0
  8. data/.gitleaks.toml +219 -0
  9. data/.overcommit.yml +16 -0
  10. data/.rubocop.yml +3 -0
  11. data/.rubocop_settings.yml +86 -0
  12. data/.rubocop_todo.yml +709 -0
  13. data/CHANGELOG.md +373 -181
  14. data/CONTRIBUTING.md +141 -0
  15. data/Gemfile +1 -1
  16. data/Jenkinsfile +27 -29
  17. data/LICENSE +202 -0
  18. data/README.md +34 -117
  19. data/SECURITY.md +42 -0
  20. data/bin/parse-changelog.sh +12 -0
  21. data/ci/codeclimate.dockerfile +6 -0
  22. data/conjur-api.gemspec +4 -1
  23. data/docker-compose.yml +2 -0
  24. data/features/authenticators.feature +33 -0
  25. data/features/host.feature +39 -9
  26. data/features/step_definitions/api_steps.rb +14 -3
  27. data/features/step_definitions/policy_steps.rb +40 -0
  28. data/features/support/env.rb +2 -0
  29. data/features/update_password.feature +2 -2
  30. data/features/user.feature +47 -6
  31. data/features_v4/support/env.rb +2 -0
  32. data/lib/conjur-api/version.rb +2 -2
  33. data/lib/conjur/acts_as_role.rb +15 -19
  34. data/lib/conjur/acts_as_user.rb +5 -1
  35. data/lib/conjur/api.rb +1 -18
  36. data/lib/conjur/api/authenticators.rb +35 -0
  37. data/lib/conjur/api/authn.rb +3 -3
  38. data/lib/conjur/api/host_factories.rb +20 -19
  39. data/lib/conjur/api/resources.rb +17 -21
  40. data/lib/conjur/api/router/v4.rb +80 -23
  41. data/lib/conjur/api/router/v5.rb +117 -23
  42. data/lib/conjur/base.rb +19 -5
  43. data/lib/conjur/base_object.rb +31 -26
  44. data/lib/conjur/build_object.rb +13 -20
  45. data/lib/conjur/cert_utils.rb +14 -0
  46. data/lib/conjur/configuration.rb +46 -24
  47. data/lib/conjur/id.rb +22 -19
  48. data/lib/conjur/role_grant.rb +13 -18
  49. data/spec/api/host_factories_spec.rb +34 -0
  50. data/spec/api_spec.rb +55 -6
  51. data/spec/base_object_spec.rb +13 -0
  52. data/spec/cert_utils_spec.rb +92 -0
  53. data/spec/configuration_spec.rb +25 -3
  54. data/spec/id_spec.rb +29 -0
  55. data/spec/spec_helper.rb +4 -1
  56. data/spec/ssl_spec.rb +50 -26
  57. data/spec/uri_escape_spec.rb +14 -2
  58. data/test.sh +23 -1
  59. metadata +31 -14
  60. data/LICENSE.md +0 -195
  61. data/lib/conjur/cast.rb +0 -41
  62. data/spec/cast_spec.rb +0 -21
  63. data/spec/vendor/rest_client_spec.rb +0 -41
data/CHANGELOG.md CHANGED
@@ -1,223 +1,415 @@
1
- # Latest
2
-
3
- # v5.3.0
4
-
5
- * Add `Conjur::API.ldap_sync_policy` for fetching the LDAP sync policy.
6
-
7
- # v5.2.1
8
-
9
- * Fix `Conjur::BuildObject#build_object` so it only tries to create
1
+ # Changelog
2
+ All notable changes to this project will be documented in this file.
3
+
4
+ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
5
+ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
6
+
7
+ ## [Unreleased]
8
+
9
+ ## [5.3.5] - 2021-05-04
10
+
11
+ ### Added
12
+ - Add `rest_client_options` option to `Conjur.configuration`. This allows users to
13
+ configure the RestClient instance used by Conjur API to communicate with the Conjur
14
+ server.
15
+ [cyberark/conjur-api-ruby#188](https://github.com/cyberark/conjur-api-ruby/issues/188)
16
+
17
+ ### Changed
18
+ - Replace monkey patching `RestClient::Request` with defaults on `Conjur.configuration.rest_client_options`
19
+ in order to limit the scope of the default `:ssl_cert_store` option only to inside
20
+ Conjur API.
21
+ [cyberark/conjur-api-ruby#188](https://github.com/cyberark/conjur-api-ruby/issues/188)
22
+
23
+ ## [5.3.4] - 2020-10-29
24
+
25
+ ### Changed
26
+ - When rotating the currently logged in user's/host's API key, we now explictily
27
+ prevent use of `resource({own_id}).rotate_api_key` for that action as the
28
+ `Conjur::API.rotate_api_key` should be used instead for that. This change is a
29
+ downstream enforcement of the stricter key rotation requirements on the server
30
+ covered by [this](https://github.com/cyberark/conjur/security/advisories/GHSA-qhjf-g9gm-64jq)
31
+ security bulletin.
32
+ [cyberark/conjur-api-ruby#181](https://github.com/cyberark/conjur-api-ruby/issues/181)
33
+
34
+ ## [5.3.3] - 2020-08-18
35
+ ### Changed
36
+ - Release process is updated to ensure that the published Ruby Gem matches a tag in this repository,
37
+ so that consumers of this gem can always reference the correct source code included in any given version.
38
+ [cyberark/conjur-api-ruby#173](https://github.com/cyberark/conjur-api-ruby/issues/173)
39
+
40
+ ## 5.3.2 - 2018-09-24
41
+ ### Added
42
+ - Add `Conjur::API.authenticator_list`, `Conjur::API.authenticator_enable`, and
43
+ ``Conjur::API.authenticator_disable` to inspect and manage authenticator status.
44
+
45
+ ## [5.3.1] - 2018-09-24
46
+ ### Added
47
+ - Updates URI path parameter escaping to consistently encode resource ids
48
+
49
+ ## [5.3.0] - 2018-06-19
50
+ ### Added
51
+ - Add `Conjur::API.ldap_sync_policy` for fetching the LDAP sync policy.
52
+
53
+ ## 5.2.1 - 0000-00-00
54
+ ### Fixed
55
+ - Fix `Conjur::BuildObject#build_object` so it only tries to create
10
56
  instances of objects for classes that inherit from BaseObject.
11
- * require `openssl` before using it.
12
-
13
- # v5.2.0
14
-
15
- * Adds support for the Role endpoint for searching and paging Role Members
16
- * Adds additional escaping to URL parameters on requests to handle special characters (e.g. spaces)
17
-
18
- # v5.1.0
19
-
20
- * Introduces backwards compatibility with Conjur 4.x for most API methods.
21
- * Adds the configuration setting `version`, which is auto-populated from the environment variable `CONJUR_VERSION`.
22
- * Adds support for the `authn-local` service, which can be used when the API client runs on the server.
23
-
24
- # v5.0.0
25
-
26
- * Provides compatibility with [cyberark/conjur](https://github.com/cyberark/conjur), Conjur 5 CE.
27
- * Changed license to Apache 2.0
28
-
29
- # v5.0.0-beta.4
30
-
31
- * Support for batch secret retrieval.
32
-
33
- # v5.0.0-beta.3
34
-
35
- * Removed hard dependency on older version of `rest-client` gem.
36
-
37
- # v5.0.0-beta.1
38
-
39
- * Migrated to be compatible with Conjur 5 API.
40
-
41
- # v4.31.0
42
-
43
- * Internal refactor to improve performance and facilitate caching.
44
-
45
- # v4.30.0
46
-
47
- The following enhancements require Conjur server 4.9.1.0 or later:
48
-
49
- * Supports filter and pagination of role-listing methods.
50
- * Supports non-recursive retrieval of role memberships.
51
- * Supports the +role+ field on `Conjur::RoleGrant`.
52
-
53
- On older server versions, the new options will be ignored by the server.
54
-
55
- # v4.29.2
56
-
57
- * `Conjur::API#resources` now supports `:owner` to retrieve all resources owned (directly or indirectly) by the indicated role. This capability has always been provided by the service, but was not exposed by the Ruby API.
58
-
59
- # v4.29.1
60
-
61
- * `Conjur::API#audit` now supports `:has_annotation` to retrieve audit events for resources annotated with the given name.
62
-
63
- # v4.29.0
64
-
65
- * Add `Conjur::API#new_from_token_file` to create an API instance from a file which contains an access token, which should be periodically updated by another process.
66
57
 
67
- # v4.28.2
68
-
69
- * Make sure certificate file is readable before trying to use it.
70
-
71
- # v4.28.1
72
-
73
- * `Conjur::API#ldap_sync_policy` now returns log events generated when
58
+ ### Added
59
+ - require `openssl` before using it.
60
+
61
+ ## 5.2.0 - 0000-00-00
62
+ ### Added
63
+ - Adds support for the Role endpoint for searching and paging Role Members
64
+ - Adds additional escaping to URL parameters on requests to handle special characters (e.g. spaces)
65
+
66
+ ## [5.1.0] - 2017-12-19
67
+ ### Added
68
+ - Introduces backwards compatibility with Conjur 4.x for most API methods.
69
+ - Adds the configuration setting `version`, which is auto-populated from the environment variable `CONJUR_VERSION`.
70
+ - Adds support for the `authn-local` service, which can be used when the API client runs on the server.
71
+
72
+ ## [5.0.0] - 2017-09-19
73
+ ### Added
74
+ - Provides compatibility with [cyberark/conjur](https://github.com/cyberark/conjur), Conjur 5 CE.
75
+
76
+ ### Changed
77
+ - Changed license to Apache 2.0
78
+ - *5.0.0-beta.4*
79
+ - - Support for batch secret retrieval.
80
+ - *v5.0.0-beta.3*
81
+ - - Removed hard dependency on older version of `rest-client` gem.
82
+ - *v5.0.0-beta.1*
83
+ - - Migrated to be compatible with Conjur 5 API.
84
+
85
+ ## [4.31.0] - 2017-03-27
86
+ ### Added
87
+ - Internal refactor to improve performance and facilitate caching.
88
+
89
+ ## [4.30.0] - 2017-03-07
90
+ ### Added
91
+ - The following enhancements require Conjur server 4.9.1.0 or later:
92
+ - Supports filter and pagination of role-listing methods.
93
+ - Supports non-recursive retrieval of role memberships.
94
+ - Supports the +role+ field on `Conjur::RoleGrant`.
95
+ - On older server versions, the new options will be ignored by the server.
96
+
97
+ ## [4.29.2] - 2017-02-22
98
+ ### Added
99
+ - `Conjur::API#resources` now supports `:owner` to retrieve all resources owned (directly or indirectly) by the indicated role. This capability has always been provided by the service, but was not exposed by the Ruby API.
100
+
101
+ ## 4.29.1 - 0000-00-00
102
+ ### Added
103
+ - `Conjur::API#audit` now supports `:has_annotation` to retrieve audit events for resources annotated with the given name.
104
+
105
+ ## [4.29.0] - 2017-02-01
106
+ ### Added
107
+ - Add `Conjur::API#new_from_token_file` to create an API instance from a file which contains an access token, which should be periodically updated by another process.
108
+
109
+ ## 4.28.2 - 0000-00-00
110
+ ### Added
111
+ - Make sure certificate file is readable before trying to use it.
112
+
113
+ ## [4.28.1] - 2016-11-30
114
+ ### Added
115
+ - `Conjur::API#ldap_sync_policy` now returns log events generated when
74
116
  showing a policy.
75
117
 
76
- # v4.28.0
77
-
78
- * Add `Conjur::API#ldap_sync_policy` to fetch the policy to use to
118
+ ## [4.28.0] - 2016-11-16
119
+ ### Added
120
+ - Add `Conjur::API#ldap_sync_policy` to fetch the policy to use to
79
121
  bring Conjur and the LDAP server into sync.
80
122
 
81
- * Remove `Conjur::API#ldap_sync_now` and `Conjur::API#ldap_sync_jobs`
123
+ ### Removed
124
+ - Remove `Conjur::API#ldap_sync_now` and `Conjur::API#ldap_sync_jobs`
82
125
 
83
- # v4.27.0
84
-
85
- * Add `Conjur::API#resources_permitted?"
86
-
87
- * `Conjur::API#ldap_sync_now` now accepts an options Hash which will
126
+ ## 4.27.0 - 0000-00-00
127
+ ### Added
128
+ - Add `Conjur::API#resources_permitted?"
129
+ - `Conjur::API#ldap_sync_now` now accepts an options Hash which will
88
130
  be passed on to the `/sync` entrypoint. The old argument list is
89
131
  maintained for backwards compatibility.
90
-
91
- * `Conjur::Api#resources` now supports `:has_annotation` for
132
+ - `Conjur::Api#resources` now supports `:has_annotation` for
92
133
  retrieving Conjur resources that have an annotation with the given
93
134
  name.
94
135
 
95
- # v4.26.0
136
+ ## [4.26.0] - 2016-07-01
137
+ ### Added
138
+ - expose admin_option in the role graph (only populated by Conjur 4.8 and later)
96
139
 
97
- * expose admin_option in the role graph (only populated by Conjur 4.8 and later)
98
-
99
- # v4.25.1
100
-
101
- * Fix token refresh when using `with_privilege`, `with_audit_roles`,
140
+ ## [4.25.1] - 2016-06-22
141
+ ### Fixed
142
+ - Fix token refresh when using `with_privilege`, `with_audit_roles`,
102
143
  and `with_audit_resources`.
103
144
 
104
- # v4.25.0
105
-
106
- * Add a workaround for a bug in Conjur <4.7 where long-running operations
145
+ ## [4.25.0] - 2016-06-17
146
+ ### Added
147
+ - Add a workaround for a bug in Conjur <4.7 where long-running operations
107
148
  (such as policy load) would sometimes fail with 404 after five minutes.
108
149
 
109
- # v4.24.1
110
-
111
- * Clarify the handling of the dry-run argument to `Conjur::API#ldap_sync_now`.
150
+ ## [4.24.1] - 2016-06-10
151
+ ### Changed
152
+ - Clarify the handling of the dry-run argument to `Conjur::API#ldap_sync_now`.
112
153
 
113
- # v4.24.0
154
+ ## [4.24.0] - 2016-05-24
155
+ ### Added
156
+ - Add `Conjur::API#ldap_sync_now` (requires Conjur 4.7 or later).
157
+ - Don't trust the system clock and don't check token validity. Rely on the server to verify the token instead, and only try to refresh if enough time has passed locally (using monotonic clock for reference where available).
158
+ - Don't try refreshing the token if the required credentials are not available.
114
159
 
115
- * Add `Conjur::API#ldap_sync_now` (requires Conjur 4.7 or later).
116
- * Don't trust the system clock and don't check token validity. Rely on the
117
- server to verify the token instead, and only try to refresh if enough time
118
- has passed locally (using monotonic clock for reference where available).
119
- * Don't try refreshing the token if the required credentials are not available.
120
-
121
- # v4.23.0
122
-
123
- * Add `with_audit_roles` and `with_audit_resources` to `Conjur::API`
160
+ ## [4.23.0] - 2016-04-22
161
+ ### Added
162
+ - Add `with_audit_roles` and `with_audit_resources` to `Conjur::API`
124
163
  to add additional roles and resources to audit records generated by
125
164
  requests
126
165
 
127
- * Fix encoding of spaces in some urls.
128
-
129
- # v4.22.1
166
+ ### Fixed
167
+ - Fix encoding of spaces in some urls.
130
168
 
131
- * `bootstrap` creates host and webservice `conjur/expiration`.
169
+ ## [4.22.1] - 2016-04-13
170
+ ### Added
171
+ - `bootstrap` creates host and webservice `conjur/expiration`.
132
172
 
133
- # v4.22.0
134
-
135
- * Add `show_expired` argument to `Conjur::Variable#value` to allow
173
+ ## [4.22.0] - 2016-03-08
174
+ ### Added
175
+ - Add `show_expired` argument to `Conjur::Variable#value` to allow
136
176
  retrieval of values of expired variables.
137
- * Properly assign ownership of bootstrap-created webservice resources to the `security_admin` group.
138
-
139
- # v4.21.0
140
-
141
- * Add extensible Bootstrap commands as API methods.
142
- * `bootstrap` grants `reveal` and `elevate` to the `security_admin` group.
143
- * `bootstrap` creates `webservice:authn-tv`.
144
- * `bootstrap` creates an `auditors` group and gives `reveal` privilege to it.
145
-
146
- # v4.20.1
147
-
148
- * BUGFIX: Better handling for unicode and special characters in user ids.
149
-
150
- # v4.20.0
151
-
152
- * Add support for Host Factory functionality (replaces conjur-asset-host-factory plugin).
153
- * Add support for sending audit events (replaces conjur-asset-audit-send plugin).
154
- * Add support for variable expiration. Variable expiration is available in version 4.6 of the Conjur server.
155
- * Add `Conjur::API` methods to querying service versions : `service_version`, `service_names`, `appliance_info`.
156
- * Add `Conjur::API` method for querying server health: `appliance_health(remote_host=nil)`
157
- * Support ISO8601 duration strings as arguments in variable expiration methods.
158
- * Add support for CIDR restrictions
159
-
160
- # v4.19.1
161
-
162
- * BUGFIX: Allow Configuration to parse several certs in a string
163
-
164
- # v4.19.0
165
-
166
- * Rename `sudo` to `elevate` throughout the spec and docstrings. This is an incompatible change, but it
167
- occurs before the Conjur 4.5 server that implements `elevate` is released.
168
-
169
- # v4.18.0
170
-
171
- * Add method `global_privilege_permitted?` to facilitate working with Conjur 4.5 global privileges.
177
+ - Properly assign ownership of bootstrap-created webservice resources to the `security_admin` group.
178
+
179
+ ## [4.21.0] - 2016-03-02
180
+ ### Added
181
+ - Add extensible Bootstrap commands as API methods.
182
+ - `bootstrap` grants `reveal` and `elevate` to the `security_admin` group.
183
+ - `bootstrap` creates `webservice:authn-tv`.
184
+ - `bootstrap` creates an `auditors` group and gives `reveal` privilege to it.
185
+
186
+ ## [4.20.1] - 2016-02-18
187
+ ### Fixed
188
+ - BUGFIX: Better handling for unicode and special characters in user ids.
189
+
190
+ ## [4.20.0] - 2016-02-05
191
+ ### Added
192
+ - Add support for Host Factory functionality (replaces conjur-asset-host-factory plugin).
193
+ - Add support for sending audit events (replaces conjur-asset-audit-send plugin).
194
+ - Add support for variable expiration. Variable expiration is available in version 4.6 of the Conjur server.
195
+ - Add `Conjur::API` methods to querying service versions : `service_version`, `service_names`, `appliance_info`.
196
+ - Add `Conjur::API` method for querying server health: `appliance_health(remote_host=nil)`
197
+ - Support ISO8601 duration strings as arguments in variable expiration methods.
198
+ - Add support for CIDR restrictions
199
+
200
+ ## 4.19.1 - 0000-00-00
201
+ ### Fixed
202
+ - BUGFIX: Allow Configuration to parse several certs in a string
203
+
204
+ ## [4.19.0] - 2015-08-28
205
+ ### Changed
206
+ - Rename `sudo` to `elevate` throughout the spec and docstrings. This is an incompatible change, but it occurs before the Conjur 4.5 server that implements `elevate` is released.
207
+
208
+ ## 4.18.0 - 0000-00-00
209
+ ### Added
210
+ - Add method `global_privilege_permitted?` to facilitate working with Conjur 4.5 global privileges.
172
211
 
173
- # v4.17.0
212
+ ## 4.17.0 - 0000-00-00
213
+ ### Added
214
+ - Add handling for `X-Forwarded-For` and `X-Conjur-Privilege` ("conjur sudo")
215
+ - Transform embedded whitespace in certificate string into newlines
174
216
 
175
- * Add handling for `X-Forwarded-For` and `X-Conjur-Privilege` ("conjur sudo")
176
- * Transform embedded whitespace in certificate string into newlines
217
+ ## [4.16.0] - 2015-04-28
218
+ ### Added
219
+ - Add ssl_certificate option to allow certs to be provided as strings (helpful in heroku)
220
+ - Add `Conjur::Configuration#apply_cert_config!` method to add certs from `#cert_file` and `#ssl_certificate` to the default cert store.
177
221
 
178
- # v4.16.0
179
- * Add ssl_certificate option to allow certs to be provided as strings (helpful in heroku)
180
- * Add `Conjur::Configuration#apply_cert_config!` method to add certs from `#cert_file` and `#ssl_certificate`
181
- to the default cert store.
182
- # v4.15.0
183
- * Extensive documentation improvements
184
- * A few additional methoods, for example `Conjur::API#public_key_names`.
222
+ ## [4.15.0] - 2015-04-23
223
+ ### Added
224
+ - Extensive documentation improvements
225
+ - A few additional methoods, for example `Conjur::API#public_key_names`.
185
226
 
186
- # v4.14.0
227
+ ## [4.14.0] - 2015-03-26
228
+ ### Added
229
+ - Bump rest-client version, remove the troublesome mime-types patch
230
+ - Make sure SSL certificate verification is enabled
231
+ - Bugfix: Don't escape ids twice when listing records
232
+ - Add a stub so that require 'conjur-api' works
233
+ - Lots of doc updates
187
234
 
188
- * Bump rest-client version, remove the troublesome mime-types patch
189
- * Make sure SSL certificate verification is enabled
190
- * Bugfix: Don't escape ids twice when listing records
191
- * Add a stub so that require 'conjur-api' works
192
- * Lots of doc updates
235
+ ## [4.13.0] - 2015-02-11
236
+ ### Added
237
+ - Add GID handling utilities
193
238
 
194
- # v4.13.0
239
+ ## [4.12.0] - 2015-01-27
240
+ ### Added
241
+ - Add the API method `role_graph` for retrieving role relationships in bulk
195
242
 
196
- * Add GID handling utilities
243
+ ## 4.11.2 - 0000-00-00
244
+ ### Added
245
+ - Patch rest-client's patch of mime-types to support lazy loading
197
246
 
198
- # v4.12.0
247
+ ### Removed
248
+ - Remove 'wrong' dependency for faster loading
199
249
 
200
- * Add the API method `role_graph` for retrieving role relationships in bulk
250
+ ## 4.11.0 - 0000-00-00
251
+ ### Fixed
252
+ - Fixed bug retrieving `Variable#version_count`
253
+ - Include CONJUR_ENV in `Conjur.configuration`
201
254
 
202
- # v4.11.2
255
+ ### Added
256
+ - Add `cert_file` option to `Conjur.configuration`
203
257
 
204
- * Patch rest-client's patch of mime-types to support lazy loading
205
- * Remove 'wrong' dependency for faster loading
258
+ ## [4.10.2] - 2014-09-22
259
+ ### Added
260
+ - Authn token is refetched before the expiration
261
+ - Support for configuration `sticky` option is discarded
262
+ - Resource#exists? refactored -- no overloading, code from exists.rb used
263
+ - Tests use Rspec v3 and reset configuration between test cases
206
264
 
207
- # v4.11.0
265
+ ## [4.10.1] - 2014-09-04
266
+ ### Added
267
+ - Resource#exists? returns true if access to resource is forbidden
268
+ - Thread-local configuration for working with different endpoints
208
269
 
209
- * Fixed bug retrieving `Variable#version_count`
210
- * Include CONJUR_ENV in `Conjur.configuration`
211
- * Add `cert_file` option to `Conjur.configuration`
270
+ ## [4.10.0] - 2014-08-15
271
+ ### Added
272
+ - User#update
273
+ - Added Users#find_users
212
274
 
275
+ ## [4.9.2] - 2014-08-05
276
+ ### Changed
277
+ - Always construct Heroku service names that are valid Heroku names
278
+ - authz resource#exists? anticipates a result of 403 Forbidden, and interprets this as true
279
+ - Provide a method to detect whether each configuration setting has been explicitly set via the environment
213
280
 
214
- # v.4.10.2
215
- * Authn token is refetched before the expiration
216
- * Support for configuration `sticky` option is discarded
217
- * Resource#exists? refactored -- no overloading, code from exists.rb used
218
- * Tests use Rspec v3 and reset configuration between test cases
281
+ ## [4.9.1] - 2014-07-17
282
+ ### Changed
283
+ - Require rest-client gem version 1.6.7, as version 1.7 has bugs in SSL certificate trust options
219
284
 
285
+ ## [4.9.0] - 2014-06-06
286
+ ### Changed
287
+ - Layer and Pubkeys are now part of the core API
220
288
 
221
- # v.4.10.1
222
- * Resource#exists? returns true if access to resource is forbidden
223
- * Thread-local configuration for working with different endpoints
289
+ ## [4.8.0] - 2014-05-23
290
+ ### Added
291
+ - Variable#variable_values, batch fetching of variables to support the new conjur env command
292
+
293
+ ## [4.7.2] - 2014-03-18
294
+
295
+ ## [4.7.1] - 2014-03-13
296
+
297
+ ## [4.6.1] - 2014-02-28
298
+
299
+ ## [4.6.0] - 2014-01-11
300
+
301
+ ## [4.4.1] - 2013-12-23
302
+
303
+ ## [4.4.0] - 2013-12-23
304
+
305
+ ## [4.3.0] - 2013-11-19
306
+
307
+ ## [4.1.1] - 2013-10-24
308
+
309
+ ## [2.7.1] - 2013-10-24
310
+
311
+ ## [4.0.0] - 2013-10-17
312
+
313
+ ## [2.5.1] - 2013-07-26
314
+
315
+ ## [2.4.0] - 2013-06-05
316
+
317
+ ## [2.3.1] - 2013-06-03
318
+
319
+ ## [2.2.3] - 2013-05-31
320
+
321
+ ## [2.2.2] - 2013-05-23
322
+
323
+ ## [2.2.1] - 2013-05-20
324
+
325
+ ## [2.2.0] - 2013-05-16
326
+
327
+ ## [2.1.8] - 2013-05-15
328
+
329
+ ## [2.1.7] - 2013-05-10
330
+
331
+ ## [2.1.6] - 2013-04-30
332
+
333
+ ## [2.1.5] - 2013-04-24
334
+
335
+ ## [2.1.4] - 2013-04-24
336
+
337
+ ## [2.1.3] - 2013-04-12
338
+
339
+ ## [2.1.2] - 2013-04-12
340
+
341
+ ## [2.1.1] - 2013-03-29
342
+
343
+ ## [2.1.0] - 2013-03-25
344
+
345
+ ## [2.0.1] - 2013-03-14
346
+
347
+ ## [2.0.0] - 2013-13-12
348
+
349
+ [Unreleased]: https://github.com/cyberark/conjur-api-ruby/compare/v5.3.5...HEAD
350
+ [5.3.5]: https://github.com/cyberark/conjur-api-ruby/compare/v5.3.4...v5.3.5
351
+ [5.3.4]: https://github.com/cyberark/conjur-api-ruby/compare/v5.3.3...v5.3.4
352
+ [5.3.3]: https://github.com/cyberark/conjur-api-ruby/compare/v5.3.1...v5.3.3
353
+ [5.3.1]: https://github.com/cyberark/conjur-api-ruby/compare/v5.3.0...v5.3.1
354
+ [5.3.0]: https://github.com/cyberark/conjur-api-ruby/compare/v5.1.0...v5.3.0
355
+ [5.1.0]: https://github.com/cyberark/conjur-api-ruby/compare/v5.0.0...v5.1.0
356
+ [5.0.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.31.0...v5.0.0
357
+ [4.31.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.30.0...v4.31.0
358
+ [4.30.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.29.2...v4.30.0
359
+ [4.29.2]: https://github.com/cyberark/conjur-api-ruby/compare/v4.29.0...v4.29.2
360
+ [4.29.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.28.1...v4.29.0
361
+ [4.28.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.28.0...v4.28.1
362
+ [4.28.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.26.0...v4.28.0
363
+ [4.26.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.25.1...v4.26.0
364
+ [4.25.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.25.0...v4.25.1
365
+ [4.25.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.24.1...v4.25.0
366
+ [4.24.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.24.0...v4.24.1
367
+ [4.24.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.23.0...v4.24.0
368
+ [4.23.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.22.1...v4.23.0
369
+ [4.22.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.22.0...v4.22.1
370
+ [4.22.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.21.0...v4.22.0
371
+ [4.21.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.20.1...v4.21.0
372
+ [4.20.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.20.0...v4.20.1
373
+ [4.20.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.19.1...v4.20.0
374
+ [4.19.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.19.0...v4.19.1
375
+ [4.19.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.16.0...v4.19.0
376
+ [4.16.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.15.0...v4.16.0
377
+ [4.15.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.14.0...v4.15.0
378
+ [4.14.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.13.0...v4.14.0
379
+ [4.13.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.12.0...v4.13.0
380
+ [4.12.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.10.2...v4.12.0
381
+ [4.10.2]: https://github.com/cyberark/conjur-api-ruby/compare/v4.10.1...v4.10.2
382
+ [4.10.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.10.0...v4.10.1
383
+ [4.10.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.9.2...v4.10.0
384
+ [4.9.2]: https://github.com/cyberark/conjur-api-ruby/compare/v4.9.1...v4.9.2
385
+ [4.9.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.9.0...v4.9.1
386
+ [4.9.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.8.0...v4.9.0
387
+ [4.8.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.7.2...v4.8.0
388
+ [4.7.2]: https://github.com/cyberark/conjur-api-ruby/compare/v4.7.1...v4.7.2
389
+ [4.7.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.6.1...v4.7.1
390
+ [4.6.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.6.0...v4.6.1
391
+ [4.6.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.4.1...v4.6.0
392
+ [4.4.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.4.0...v4.4.1
393
+ [4.4.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.3.0...v4.4.0
394
+ [4.3.0]: https://github.com/cyberark/conjur-api-ruby/compare/v4.1.1...v4.3.0
395
+ [4.1.1]: https://github.com/cyberark/conjur-api-ruby/compare/v2.7.1...v4.1.1
396
+ [2.7.1]: https://github.com/cyberark/conjur-api-ruby/compare/v4.0.0...v2.7.1
397
+ [4.0.0]: https://github.com/cyberark/conjur-api-ruby/compare/v2.5.1...v4.0.0
398
+ [2.5.1]: https://github.com/cyberark/conjur-api-ruby/compare/v2.4.0...v2.5.1
399
+ [2.4.0]: https://github.com/cyberark/conjur-api-ruby/compare/v2.3.1...v2.4.0
400
+ [2.3.1]: https://github.com/cyberark/conjur-api-ruby/compare/v2.2.3...v2.3.1
401
+ [2.2.3]: https://github.com/cyberark/conjur-api-ruby/compare/v2.2.2...v2.2.3
402
+ [2.2.2]: https://github.com/cyberark/conjur-api-ruby/compare/v2.2.1...v2.2.2
403
+ [2.2.1]: https://github.com/cyberark/conjur-api-ruby/compare/v2.2.0...v2.2.1
404
+ [2.2.0]: https://github.com/cyberark/conjur-api-ruby/compare/v2.1.8...v2.2.0
405
+ [2.1.8]: https://github.com/cyberark/conjur-api-ruby/compare/v2.1.7...v2.1.8
406
+ [2.1.7]: https://github.com/cyberark/conjur-api-ruby/compare/v2.1.6...v2.1.7
407
+ [2.1.6]: https://github.com/cyberark/conjur-api-ruby/compare/v2.1.5...v2.1.6
408
+ [2.1.5]: https://github.com/cyberark/conjur-api-ruby/compare/v2.1.4...v2.1.5
409
+ [2.1.4]: https://github.com/cyberark/conjur-api-ruby/compare/v2.1.3...v2.1.4
410
+ [2.1.3]: https://github.com/cyberark/conjur-api-ruby/compare/v2.1.2...v2.1.3
411
+ [2.1.2]: https://github.com/cyberark/conjur-api-ruby/compare/v2.1.1...v2.1.2
412
+ [2.1.1]: https://github.com/cyberark/conjur-api-ruby/compare/v2.1.0...v2.1.1
413
+ [2.1.0]: https://github.com/cyberark/conjur-api-ruby/compare/v2.0.1...v2.1.0
414
+ [2.0.1]: https://github.com/cyberark/conjur-api-ruby/compare/v2.0.0...v2.0.1
415
+ [2.0.0]: https://github.com/cyberark/conjur-api-ruby/releases/tag/v2.0.0