Skip to content

Tink Go HashiCorp Vault Extension v2.0.0

Compare
Choose a tag to compare
@morambro morambro released this 22 Jun 10:11
· 53 commits to main since this release

This is Tink HashiCorp Vault Extension 2.0.0

What's new

This is the first release from https://github.com/tink-crypto/tink-go-hcvault.

The complete list of changes since 1.7.0 can be found here.

  • Upgraded to use Bazel 6.0.0
  • Changed target Go version to 1.19
  • Fixed parsing of vault key path (commit)
  • Make hcvault.newHCVaultAEAD reject key URIs that aren't well formatted (commit)
  • Rewrote Vault transit mount parsing (commit)
  • Added/upgraded CI test scripts

Get started

To get started using Tink, see the setup guide.

Go tooling

go get github.com/tink-crypto/tink-go-hcvault/[email protected]

Bazel

workspace(name = "example")

load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")

http_archive(
    name = "io_bazel_rules_go",
    sha256 = "6dc2da7ab4cf5d7bfc7c949776b1b7c733f05e56edc4bcd9022bb249d2e2a996",
    urls = [
        "https://mirror.bazel.build/github.com/bazelbuild/rules_go/releases/download/v0.39.1/rules_go-v0.39.1.zip",
        "https://github.com/bazelbuild/rules_go/releases/download/v0.39.1/rules_go-v0.39.1.zip",
    ],
)

http_archive(
    name = "bazel_gazelle",
    sha256 = "ecba0f04f96b4960a5b250c8e8eeec42281035970aa8852dda73098274d14a1d",
    urls = [
        "https://mirror.bazel.build/github.com/bazelbuild/bazel-gazelle/releases/download/v0.29.0/bazel-gazelle-v0.29.0.tar.gz",
        "https://github.com/bazelbuild/bazel-gazelle/releases/download/v0.29.0/bazel-gazelle-v0.29.0.tar.gz",
    ],
)

# [Optional]: tink-go is imported as a go_repository by tink_go_gcpkms_dependencies.
# this is needed only if the user wants to pin to a specific commit/version of tink-go.
# http_archive(
#     name = "com_github_tink_crypto_tink_go_v2",
#     urls = ["https://github.com/tink-crypto/tink-go/archive/refs/tags/v2.0.0.zip"],
#     strip_prefix = "tink-go-2.0.0",
#     sha256 = "27f7446a29956173e10a65d0f71f7cd795ba3049b96fa5fae47333e06661ac2a",
# )

http_archive(
    name = "com_github_tink_crypto_tink_go_hcvault",
    urls = ["https://github.com/tink-crypto/tink-go-hcvault/archive/refs/tags/v2.0.0.zip"],
    strip_prefix = "tink-go-hcvault-2.0.0",
    sha256 = "3dadfa3b74ca73269231b0c2b35ce70e54caa712d20ebbe89a56b691c02a2fbb",
)

load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")

load("@bazel_gazelle//:deps.bzl", "gazelle_dependencies", "go_repository")

# [Optional]: tink-go is imported as a go_repository by tink_go_gcpkms_dependencies.
# this is needed only if the user wants to pin to a specific commit/version of tink-go.
# load("@com_github_tink_crypto_tink_go_v2//:deps.bzl", tink_go_dependencies="go_dependencies")
#
# tink_go_dependencies()

load("@com_github_tink_crypto_tink_go_hcvault//:deps.bzl", "tink_go_hcvault_dependencies")

tink_go_hcvault_dependencies()

#######################################
#
# Your project dependencies here.
#
#######################################

go_rules_dependencies()

go_register_toolchains(version = "1.19.9")

gazelle_dependencies()