ACME Changelog

Changelog

Kong Gateway 3.8.x

• Fixed an issue where the DP would report that deprecated config fields were used when configuration was pushed from the CP. #13069
• Fixed an issue where username and password were not accepted as valid authentication methods. #13496

Kong Gateway 3.7.x

• Fixed an issue where the certificate was not successfully renewed during ACME renewal. #12773
• Fixed migration of Redis configuration.
• Fixed an issue where the wrong error log was printed regarding private keys.

Kong Gateway 3.6.x

• Standardized Redis configuration across plugins. The Redis configuration now follows a common schema that is shared across other plugins. #12300 #12301

Kong Gateway 3.5.x

• Exposed the new configuration field scan_count for Redis storage, which controls how many keys are returned in a scan call. #11532

Kong Gateway 3.4.x

• Fixed an issue where the sanity test didn’t work with kong storage in hybrid mode. #10852

Kong Gateway 3.3.x

• Added the account_key configuration parameter
• Added the config.storage_config.redis.namespace configuration parameter. The namespace will be concatenated as a prefix of the key. The default is an empty string ("") for backward compatibility. The namespace can be any string that isn’t prefixed with any of the Kong reserved words.

Kong Gateway 3.1.x

• Added the config.storage_config.redis.ssl, config.storage_config.redis.ssl_verify, and config.storage_config.redis.ssl_server_name configuration parameters.

Kong Gateway 3.0.x

• The storage_config.vault.auth_method configuration parameter now defaults to token.
• Added the allow_any_domain configuration parameter. If enabled, it lets Kong Gateway ignore the domains field.

Kong Gateway 2.8.x

• Added the rsa_key_size configuration parameter.
• The consul.token, redis.auth, and vault.token are now marked as now marked as referenceable, which means they can be securely stored as secrets in a vault. References must follow a specific format.

Kong Gateway 2.7.x

• Starting with Kong Gateway 2.7.0.0, if keyring encryption is enabled, the account_email, eab_kid, and eab_hmac_kid parameter values will be encrypted.

Kong Gateway 2.4.x

• Added external account binding (EAB) support with the eab_kid and eab_hmac_key configuration parameters.

Kong Gateway 2.1.x

• Added the fail_backoff_minutes configuration parameter.