v2.22.0

What's New

• None

Enhancements

• Support additional policy condition format. Historically only "stringified" JSON was supported by the Britive backend. Now standard JSON is supported and this SDK will now optionally offer to convert the policy condition block to a python dictionary.

Bug Fixes

• Enhanced error handling when a secret or node/path in secrets manager does not exist
• Fixed bug related to AWS federation provider when a tenant was not provided via the BRITIVE_TENANT environment variable

Dependencies

• None

Other

• None

v2.21.0

What's New

• None

Enhancements

• Support for environment_association in profiles.list
• Support for summary parameter on profiles.get

Bug Fixes

• Fixes a bug that will re-request access to a secret instead of raising an exception that the secret request was denied.
• Fixes service identity tokens due to some changes in the way they are generated now that service identity workload federation is supported.
• Fixes a bug with profiles.update which was not including all the proper fields in the update request.

Dependencies

• None

Other

• Updates to the test suite.

v2.20.1

What's New

• None

Enhancements

• None

Bug Fixes

• Properly handle situation when a user requests approval to checkout a profile but there is already an approved request for that same profile.

Dependencies

• None

Other

• None

v2.20.0

What's New

• Support for profile permission constraints.

Enhancements

• Support multiple notification mediums for an approval policy condition.

Bug Fixes

• None

Dependencies

• Resolve dependabot alert for requests - https://github.com/britive/python-sdk/security/dependabot/1

Other

• None

v2.19.0

What's New

• Added workload.scim_user for managed workload identity federation for SCIM users.
• Added my_access.approve_request, my_access.reject_request, and my_access.list_approvals.

Enhancements

• Modified the way in which workload identity providers are associated with service identities.
• Added date_schedule and days_schedule to the various policy build methods.

Bug Fixes

• Addressed race condition in my_access.checkout if multiple processes (running as the same user) attempt to check out the same profile for the same environment at the same time

Dependencies

• None

Other

• None

v2.18.0

What's New

• Support for tag membership rules.

Enhancements

• Allow the creation of external tags (tags associated with an identity provider) using a non-SCIM identity.

Bug Fixes

• None

Dependencies

• None

Other

• None

v2.17.0

What's New

• Workload API coverage (create workload federation identity providers and map to service identities) workload
• System Policies coverage system.policies
• System Roles coverage system.roles
• System Permissions coverage system.permissions

Enhancements

• Add custom attribute coverage to users and service identities

Bug Fixes

• None

Dependencies

• For dev/test removed the pin on pytest which was causing issues with newer versions of python

Other

• None

DEPRECATION NOTICE

policies.py

This python file only holds one method build. The remainder of the system policy logic has been created
in system.policies so as not to cause confusion with secrets manager and profile policies.

In the next major release, policies.py will be retired. As of release 2.17.0 the polices.build method
simply calls system.policies.build.

v2.16.0

What's New

• Natively support Azure Managed Identity OIDC authentication for workload federation.

Enhancements

• None

Bug Fixes

• None

Dependencies

• None

Other

• None

v2.15.1

What's New

• None

Enhancements

• None

Bug Fixes

• Added missing API call profiles.get_scopes()

Dependencies

• None

Other

• None

v2.15.0

What's New

• Added two new APIs for managing single environment scope changes for a profile
  • profiles.add_single_environment_scope()
  • profiles.remove_single_environment_scope()

Enhancements

• None

Bug Fixes

• None

Dependencies

• None

Other

• None