Vault 1.14.0 release notes

GA date: June 21, 2023

Release notes provide an at-a-glance summary of key updates to new versions of Vault. For a comprehensive list of product updates, improvements, and bug fixes refer to the changelog included with the Vault code on GitHub.

We encourage you to upgrade to the latest release of Vault to take advantage of continuing improvements, critical fixes, and new features.

Known issues and breaking changes

Version	Issue
1.14.0+	Users limited by control groups can only access issuer detail from PKI overview page
All	API calls to update-primary may lead to data loss
1.14.0+	AWS static roles ignore changes to rotation period
1.14.0+	UI Collapsed navbar does not allow certain click events
1.14.3 - 1.14.5	Vault storing references to ephemeral sub-loggers leading to unbounded memory consumption
1.14.4 - 1.14.5	Internal error when vault policy in namespace does not exist
1.14.0+	Sublogger levels not adjusted on reload
1.14.5	Fatal error during expiration metrics gathering causing Vault crash
1.14.5	User lockout potential double logging
1.14.5 - 1.14.9	Deadlock can occur on performance secondary clusters with many mounts

Vault companion updates

Companion updates are Vault updates that live outside the main Vault binary.

Release	Update	Description
Vault Secrets Operator for Kubernetes	GA	Directly connect Vault secrets into Pods as native Kubernetes Secrets without modifying your application code. Learn more: Vault Secrets Operator
Terraform	GA	Use LDAP authentication from the unified LDAP engine to Terraform Vault Provider. Learn more: LDAP Secrets Engine
Terraform	ENHANCED	Support for additional PKI issuers and keys endpoints. Learn more: PKI Secrets Engine

Core updates

Follow the learn more links for more information, or browse the list of Vault tutorials updated to highlight changes for the most recent GA release.

Release	Update	Description
Public Key Infrastructure (PKI)	GA	Use ACME to automate certificate lifecycle management for private PKI needs with standard ACME clients like Certbot and k8s cert-manager. Request certificates from a Vault server without needing to know Vault APIs or authentication mechanisms. Learn more: PKI Secrets Engine API: ACME
Public Key Infrastructure (PKI)	GA	Use the improved PKI web UI to manage your PKI instance with intuitive configuration and reasonable defaults for workflows, metadata, issuer info, mount and tidy configuration, cross signing, multi-issuers etc.and includes. Learn more: PKI Secrets Engine
Security patches	ENHANCED	Various security improvements to remediate low severity and informational findings from a 3rd party security audit. Learn more: Vault security model
Vault Agent	BETA	Fetch secrets directly into your application as environment variables. Learn more: Process Supervisor Mode
Vault Agent	GA	Use a new subcommand and daemon, Vault Proxy, to access the proxy functionality of Vault Agent. Vault Proxy will handle Vault Agent proxy functionality going forward to simplify use case decisions for users. Learn more: Vault Proxy
Plugin support	GA	Capture plugin metadata in the Vault audit log. Learn more: Syslog audit device
	GA	Use X509 Authentication and Terraform Vault Provider in the MongoDB Atlas Database Secrets Engine. Learn more: MongoDB Atlas Database Secrets Engine
	ENHANCED	Dependency updates and more robust multiplexing for secrets and authentication plugins. Learn more: Serving a plugin with multiplexing (Plugin Development)
AWS support	ENHANCED	Monitoring and performance enhancements for the Vault Lambda extension. Learn more: Vault Lambda Extension guide
AWS support	GA	Use static roles for IAM users in the AWS Secrets Engine. Learn more: AWS Secrets Engine
Vault GUI	ENHANCED	Streamlined and aligned navigation with HCP Vault UI. Learn more: Vault UI
Transit	ENHANCED	Contributed by the Vault community. Support for public-key only Transit keys and BYOK-secured export of key material. Learn more: Transit Secrets Engine

Enterprise updates

Release	Update	Description
Vault replication	ENHANCED	Stability improvements based on customer feedback for Vault 1.13. See theVault changelogfor a full list of bug fixes. Learn more: Replication overview
License utilization reporting	GA	Enables automatic license utilization reporting for you and HashiCorp to ensure transparent, accurate billing. Learn more: Automated License utilization reporting

Feature deprecations and EOL

Deprecated in 1.14	Retired in 1.14
Vault Agent API proxy support	Duplicative Docker Images

Please refer to the Deprecation Plans and Notice page for up-to-date information on feature deprecations and plans or the Feature Deprecation FAQ for general questions about our deprecation process.