HashiCorp Cloud Platform
Changelog
2024-11-11
HCP Vault 1.18.1 on AWS and Azure: Vault 1.18.1 has started rolling out to HCP Vault Dedicated clusters on AWS and Azure. Refer to 1.18.1 Enterprise release notes in GitHub to learn more about what's new in 1.18.1.
Note
Workload identity federation (WIF) for HCP Vault Dedicated cluster's auth methods and secrets engines is not currently supported.
2024-10-15
Vault Radar Public Beta: Vault Radar is currently available to be tested by any HCP user. If you would like to get started, go to your HCP project and claim your Radar instance. Refer to Vault Radar product tiers to learn more.
HCP Vault 1.15.15 on AWS: Vault 1.15.15 is now available on HCP for AWS clusters. Refer to 1.15.15 Enterprise in GitHub to learn more about what's new in 1.15.15.
HCP Vault Secrets: Dynamic secrets for AWS and GCP are now available in public beta.
2024-10-14
HCP Audit Log Streaming: A public beta of HCP's unified audit log streaming capabilities is now available. You can use a web-based UI workflow to send audit logs for your organization's platform and product events to one of the supported external SIEMs: AWS Cloudwatch, Datadog, or Splunk Cloud. For more information, refer to HCP audit log streaming.
2024-10-05
HCP Access Management: Project-level service principals can now be assigned access to multiple projects. This enables workflows that need to interact with more than one project at a time with varying levels of permissions. Refer to documentation for more details.
2024-10-02
HCP Vault 1.15.15 on AWS: Vault 1.15.15 is now available on HCP for AWS clusters. Refer to 1.15.15 Enterprise in GitHub to learn more about what's new in 1.15.15.
HCP Vault 1.16.10 on Azure: Vault 1.16.0 is now available on HCP for Azure clusters. Refer to 1.16.10 Enterprise in GitHub to learn more about what's new in 1.16.10.
2024-09-09
HCP Vault 1.16.9 on Azure: Vault 1.16.9 is now available on HCP for Azure clusters. Refer to 1.16.9 Enterprise in GitHub to learn more about what's new in 1.16.9.
2024-09-06
HCP Vault Dedicated: Clusters can now be configured with a backup network (HVN) for cross-region disaster recovery protection. Refer to this guide to configure.
2024-08-08
HCP Vault Secrets New Sync integration & improvements
2024-07-24
HCP Packer now tracks rich CI/CD pipeline metadata. Refer to the following topics for additional information:
2024-05-14
HCP Vault 1.15.8 on AWS: Vault 1.15.8 is now available on HCP for AWS clusters. Refer to 1.15.8 Enterprise in GitHub to learn more about what's new in 1.15.8.
2024-05-13
HCP Vault Secrets: Enhanced RBAC support with two new roles App Manager and App Secrets Reader via UI at the Project level. Additionally, support for these roles to be applied at the App level via Terraform Provider.
2024-05-09
HCP Vault 1.16.2 on Azure: Vault 1.16.2 is now available on HCP for Azure clusters only. Click here to learn more about what's new in 1.16.2.
Notes: The Secrets Sync feature which went GA in Vault 1.16 will remain disabled on HCP Azure clusters while we work on integrating it with the platform itself. Additionally, the Secrets Sync beta which was available in Vault 1.15 won't be available anymore after the upgrade to 1.16, which is why we're holding off on releasing 1.16 to AWS clusters until the integration work is completed.
2024-05-01
HCP Boundary 0.16.0: Boundary 0.16.0 is now available on HCP. Click here to learn more about what's new in 0.16.0.
HCP unified audit log streaming: HCP's unified audit log streaming capabilities are now available as a public beta offering. You can use a new Terraform provider resource to send audit logs for platform and product events to one of the following external SIEMs: AWS Cloudwatch, Datadog, Splunk Cloud. For more information, refer to HCP audit log streaming.
2024-04-25
HCP Vault Secrets: Sync integration support for Azure Key Vault and GCP Secret Manager are now generally available on HCP Vault Secrets.
2024-04-15
HCP Boundary 0.15.4: Boundary 0.15.4 is now available on HCP. Click here to learn more about what's new in 0.15.4.
In addition, HCP Boundary now supports the ability to manually upgrade clusters within a 30 day grace period of a new Boundary release. This can be set in the cluster configuration in the HCP Portal. After 30 days the upgrade will be performed automatically.
2024-03-21
Vault Radar Limited Availability: Vault Radar is currently available to a small set of interested customers. If you would like to be an early adopter, you must join this waitlist.
2024-02-06
HCP Vault 1.15.5: Vault 1.15.5 is now available on HCP. Click here to learn more about what's new in 1.15.5.
2024-01-30
HCP Packer New Nomenclature:
- Renaming of Image Buckets to Bucket:
- The prefix 'Image' has been removed from all the resources. This change simplifies the naming convention and makes it more intuitive for users to identify and manage their resources.
- Renaming of Iteration Resource to Version:
- The 'Iteration' resource has been renamed to 'Version'. This change better reflects the functionality of the resource and aligns with standard terminology used in version control and software development practices.
- Renaming of Image Resource to Artifact:
- The 'Image' resource has been renamed to 'Artifact'. This renaming is part of our ongoing efforts to enhance clarity and consistency in our resource naming. 'Artifact' more accurately represents the nature and usage of these resources in the multi-cloud environment.
Notes: These changes are part of our commitment to improving user experience and aligning with industry standards. Version [0.82.0] of the HCP provider for Terraform reflects these changes. For any questions or concerns, please reach out to our support team.
2024-01-30
HCP Boundary 0.15.0: Boundary 0.15.0 is now available on HCP. Click here to learn more about what's new in 0.15.0.
2024-01-18
Vault Radar Private Beta: Vault Radar is in private beta. Currently, users must accept the terms of use to participate in the beta program.
2024-01-16
IP Allow list is available with HCP Vault. It allows you to add specific IP addresses or CIDR ranges that will be permitted to access the HCP Vault cluster's public endpoint (if public access is enabled).
2023-12-08
HCP Vault 1.15.4: Vault 1.15.4 is now available on HCP. Click here to learn more about what's new in 1.15.4.
2023-11-28
HCP Vault 1.15.2: Vault 1.15.2 is now available on HCP. Click here to learn more about what's new in 1.15.2.
2023-11-06
HCP Vault expands observability support: HCP Vault gains 3 new observability integrations with AWS Cloudwatch, Elasticsearch, and New Relic, as well as a generic HTTP endpoint for flexible audit log and metrics streaming.
2023-11-02
HCP Trial Billing Notifications: The organization owner and admin users of any HCP account in Trial status (i.e. no credit card added) will receive email notifications when their trial credits are running low ($10 or less) or depleted completely.
2023-10-26
Multiple performance replication secondaries for HCP Vault: HCP Vault now supports multiple performance replication secondaries on Plus tier.
2023-10-11
HCP Vault Secrets GA: HCP Vault Secrets is now available on HashiCorp Cloud Platform in general availability.
2023-09-21
HCP Vault 1.14.3: Vault 1.14.3 is now available on HCP. Click here to learn more about what's new in 1.14.3.
2023-09-01
HCP Groups: Introducing HCP Groups that allow the bundling of identities and treating them as one unit while assigning roles and associating with projects. This enables logical user management and clear auditing of permissions. See the documentation and other information on how to get started.
2023-08-10
HCP Vault 1.14.1: Vault 1.14.1 is now available on HCP. Click here to learn more about what's new in 1.14.1.
2023-07-27
HCP Packer Audit Logs: HCP Packer now supports audit logs streaming to Datadog and Amazon CloudWatch. Click here to learn more.
2023-07-25
HCP Vault 1.14.0: Vault 1.14.0 is now available on HCP. Click here to learn more about what's new in 1.14.0.
2023-07-17
ADP on HCP Vault Plus Clusters: Advanced Data Protection (ADP) is now available on HCP Vault Plus clusters at no additional cost. Customers can now use the KMIP, Key Management, and Transform secrets engines that make up the ADP package.
2023-06-13
HCP Vault Secrets Public Beta: HCP Vault Secrets is now available on HashiCorp Cloud Platform in public beta.
2023-05-15
HCP Multi-project Support: HCP now supports multiple Projects within an HCP Organization. Projects allow HCP admins to logically segment out their HashiCorp services within an Organization by team, environment, or use case with Project-level RBAC policies to ensure least-privilege access. All new and existing Orgs have a default project created.
2023-05-01
HCP Vault Oracle Plugin Support: The Oracle Database Secrets Engine is now supported in HCP Vault on AWS.
2023-04-25
HCP Vault Azure Plus Tier General Availability: Plus tier is now generally available on Azure in HCP Vault. Plus tier supports performance replication and Sentinel policies, in addition to all existing Standard tier functionality available for HCP Vault on Azure
2023-03-08
HCP Packer channel assignment history and rollback: View the history of channel assignment activity and automatically roll back to the previously assigned iteration when revoking a currently published image.
2023-03-06
HCP Consul IP Allow list: This feature improves the security of your HCP Consul deployment by allowing access to Consul server, UI, and API only from allowlisted IP CIDRs.
2023-03-02
HCP Consul Management Plane Service General Availability: This service is now generally available. With this service, users can get global visibility and control on both their self-managed and HashiCorp-managed Consul clusters.
2023-02-28
HCP Vault General Availability on Azure: HCP Vault is now generally available on Azure. HCP Vault gives you the power and security of HashiCorp Vault as a managed service. Read more
Additional Azure Regions: HashiCorp Cloud Platform users can deploy HCP Consul and HCP Vault in four new Azure regions - Canada Central (canadacentral), South East Asia (southeastasia) ; Japan East (japaneast) ; Australia SouthEast (australiasoutheast)
2023-02-08
HashiCorp Cloud Platform users can deploy HCP Consul and HCP Vault in three new AWS regions - Tokyo, Japan (ap-northeast-1) ; Montreal, Canada (ca-central-1) ; Ohio, US (us-east-2)
2023-02-08
HCP Vault Beta Updates: Users can now manage their beta clusters by being able to manage snapshots, scale between tiers, managing major version upgrades settings, as well as audit log & metrics streaming.
2023-02-06
Sentinel on HCP Vault Plus Clusters: Sentinel is now avaliable on HCP Vault Plus clusters at no additional cost.
2023-01-11
HCP Consul Management Plane Service Public Beta: This service is now available publicly. With this service, users can get global visibility and control on both their self managed and Hashicorp managed Consul clusters.
2022-12-15
Login with HCP to Vagrant Cloud: Users can now link their HCP accounts to log into Vagrant Cloud, or create new accounts using HCP. For more details on this and our HCP strategy for Vagrant, click here.
2022-12-15
HCP Vault Azure Beta Production Tiers: Users can now create 3-node clusters as part of the Starter and Standard tiers on Azure. Read more
2022-12-05
HCP Guided Flow for Peering Connections: Users can use a wizard to guide them through the multiple steps to peer their AWS VPC to the HashiCorp Virtual Network.
2022-10-25
HCP Packer Ancestry: Users can now track image ancestry in HCP Packer to trace changes and vulnerabilities from a source image to all of its descendant images, as well as revoke all descendants through inherited revocation.
2022-09-27
HCP Consul 1.13.2: Consul 1.13.2 is now available on HCP. Click here to learn more about what's new in 1.13.2. Click here to read the full 1.13.0 changelog.
2022-09-09
Single step automated peering of HVNs to AWS VPCs: Users can click a single button to peer HashiCorp Virtual Network to their AWS VPCs.
2022-08-29
Automated peering of HashiCorp Virtual Networks to AWS VPCs: Users can leverage automation to peer HashiCorp Virtual Network to their AWS VPCs, which provides an alternative to manual peering, and reduces the peering time from 30-60 minutes to about 5 minutes.
2022-08-11
Platform Logs (HCP Consul): Platform Logs are auditable events across HCP. This will enable better tracking of changes within a customer's HCP Organization and meet troubleshooting and compliance needs. This release covers HCP Consul and tracks activity like cluster creation, upgrades and snapshots. These logs can be seen when navigating to a particular Consul cluster within the HCP Portal.
2022-07-26
HCP Consul General Availability on Azure: HCP Consul is now generally available on Azure. HCP Consul is a fully managed service mesh to discover and securely connect any service. Read more
2022-06-30
HCP Packer no longer redacts the image identifier for revoked iterations: The image identifier image_id
will no longer be replaced with error_revoked
for revoked iterations. Packer will continue to error when building new images from iterations that are revoked. Terraform will not error but users can validate iterations in their Terraform configurations to prevent new deployments of images from revoked iterations. Read more about validating iterations in Terraform
Note: This is a breaking change for Terraform Configurations that depends on error_revoked
to validate iterations.
2022-06-07
HCP Consul on Azure Public Beta: Consul on Azure is now available on HashiCorp Cloud Platform in public beta. Read more
2022-06-07
HCP Consul cluster creation experience redesign: We have streamlined the cluster creation experience to allow users to configure their clusters using automated or manual workflows.
2022-05-05
HashiCorp Status site redesign: The HashiCorp Status site, https://status.hashicorp.com, has been redesigned to better meet the needs of the various customers relying on our services. We have streamlined the layout to make it easier to find services and understand how an incident is impacting them. Historical information is still preserved for customers interested in past incidents.
2022-04-06
HCP Terraform Provider 0.25.0: Version 0.25.0 of the HCP Terraform Provider is now available. Read more
- What's New:
- Users can now scale plus-tier clusters and use path filtering
2022-03-29
HCP Vault Plus Paths Filters and Cluster Resizing: Users can now create deny paths filters for performance replicas. Users can also resize their Plus clusters and secondaries in-place.
2022-02-22
HCP Consul Audit Log Download: Users can now download audit logs from all HCP Consul cluster tiers except “Development”. Read more
HCP Vault Plus Configuration: Users can create a new HCP Vault configuration: The Plus tier includes all of the functionality in the Standard tier and adds the ability to create multi-region performance replicas. The Plus tier has three size offerings (S, M, L), and unlimited clients. Read replicas will include: secrets, policies, secrets backend config, auth backends config, audit backends config, and batch tokens. Read more
2021-12-16
Remove Credit Card: Users can now remove their credit card on the HCP portal billing page. The account must be in good standing and cannot run production-tier resources without a payment method.
2021-12-08
HCP Vault Cluster Scaling Now Available: HCP Vault clusters can now be modified in-place based on tier (Dev, Starter, Standard) or size (Standard S, M, L).
2021-10-14
HCP Vault and HCP Consul Available in Singapore and Sydney AWS Regions: HCP Vault and HCP Consul clusters can now be deployed in Singapore and Sydney AWS regions. Read more
2021-09-14
HCP Vault Admin Token Entity Policy Change: Users of HCP Vault admin tokens can now avoid unchecked client counts due to them not being associated with a Vault identity. This change attaches an entity to admin tokens, which results in the maximum admin-token associated client count for a cluster being 1 per month.
2021-08-24
Multi-Factor Authentication Configuration: Users can now disable MFA for their HCP accounts. Read more
2021-08-09
HCP Vault 1.8.0 (New Clusters Only): Users can now use Vault 1.8.0 for new Vault clusters. Read more about Vault 1.8.0
HVN-HVN Peering: It is now possible to peer two HVNs across regions within AWS. The Peering can be created automatically through the HCP Consul Federation create flow or manually through the HCP Terraform Provider.
2021-08-04
HCP Terraform Provider 0.12.0: Version 0.12.0 of the HCP Terraform Provider is now available. Read more
- What's New:
- HCP Vault: A new configuration is now available in the provider:
starter_small
- HCP Vault: A new configuration is now available in the provider:
2021-08-02
HCP Vault Starter Configuration: Users can create a new HCP Vault configuration: The Starter configuration provides a production-grade cluster that balances predictable pricing, performance, and cost. Read more
- Specs/features:
- 2 vCPU, 8 GiB RAM
- 5 GB storage, 250 GB for snapshots and audit logs (soft limits)
- 25 included clients
- Audit logs
- Snapshots and restores
- Bronze tier Cloud support
2021-07-30
Multi-Factor Authentication: Users can now enable MFA from within their own HCP account. Read more
HCP Consul Plus Configuration with Federation: HCP Consul Plus allows users to federate Consul clusters across multiple regions for improved redundancy and resiliency of applications. This provides a simple and secure way for users to implement a multi-region service mesh in AWS. Read more
2021-07-20
HCP Vault Resource Quotas: To help maintain the health of the fleet, the following resource limits are now in place:
- Added cgroup-based resource limits for HCP Vault clusters
- Added Vault API resource limits (requests/second)
2021-07-16
HCP Terraform Provider 0.10.0: Version 0.10.0 of the HCP Terraform Provider is now available. Read more
- What's New:
- HCP Consul: Fixed an issue with updating the version of Consul
2021-07-12
Organization Rename: Users can now rename their HCP organization by navigating to the Org Management page, or by clicking Settings
on the left Navbar, then Manage
, and then Edit name
.
2021-07-06
Terraform Landing Page: The HCP portal now includes a landing page for both TFC and the HCP Terraform Provider. It can be accessed on the main left-hand navigation under Consul
and Vault
.
2021-06-30
HCP Terraform Provider 0.9.0: Version 0.9.0 of the HCP Terraform Provider is now available. Read more
- What's New:
- HCP Consul: Users can now specify if auto peering should happen with
auto_hvn_to_hvn_peering
- HCP Vault: Users can now update
public_endpoint
without having to recreate the cluster
- HCP Consul: Users can now specify if auto peering should happen with
2021-06-18
HCP Terraform Provider 0.8.0: Version 0.8.0 of the HCP Terraform Provider is now available. Read more
- What's New:
- HCP Consul: A new configuration is now available in the provider:
plus
- HCP Vault: New configurations are now available in the provider:
standard_small
,standard_medium
,standard_large
- HCP Consul: A new configuration is now available in the provider:
UI Scalable Navigation: The main headers and general approach to navigation within the portal has been significantly updated to improve usability.
2021-06-17
User Profile Page: The HCP Profile Page now shows your HashiCorp ID, and offers the ability to reset your password.
2021-06-07
HCP Terraform Provider 0.7.0: Version 0.7.0 of the HCP Terraform Provider is now available. Read more
- What's New:
- Users can now manage HVN Routes from the provider
Note: This version contains breaking changes to the hcp_aws_transit_gateway_attachment
and hcp_aws_network_peering
resources and data sources. Please pin to the previous version and follow this migration guide when you're ready to migrate.
2021-05-17
AWS Transit Gateway Attachments: As you grow your HCP footprint, you’ll need more elegant ways to simplify networking at scale. That’s why we introduced support for transit gateway attachments in HCP. Transit gateways enable a “hub-and-spoke” configuration of your networks, a simpler and more secure option compared to the complexity of managing separate virtual private cloud (VPC) connections. Instead of establishing a VPC peering connection for every environment, you can create an “attachment” to a transit gateway. The transit gateway then manages these connections centrally. With a transit gateway, you can secure a single ingress/egress point, instead of monitoring multiple peering connections. To get started, read this tutorial and watch webinar.
HVN Routes (Web Portal Only): Users now have a single place to view/edit all of the connections associated with HVN’s. This includes the option for the user to view routes for BOTH peerings and TGW attachments. There are options to view/add/delete HVN routes through the UI. Read more
2021-05-03
Single Sign-On via Okta: HCP allows organizations to configure SAML 2.0 SSO (Single Sign-On) as an alternative to traditional user management with GitHub and email-based options. This can help mitigate Account Take Over (ATO) attacks, provide a universal source of truth to federate identities from your identity provider (IDP), and better manage user access to your organization. At this time, HCP integrates with Okta as an identity provider, with others planned. Read more
2021-04-07
New Sizing Options for HCP Consul Standard Tier: Users have additional sizing options when deploying a Consul Standard cluster. Medium and Large VM sizes are now available in HCP. See pricing
HCP Vault Generally Availability on AWS: HCP Vault gives you the power and security of HashiCorp Vault as a managed service. Read more
2021-04-06
Free Credits Expanded: New users now have $50 in credits for use on HCP. Sign up
2021-03-09
Email/Password Authentication: Users can now login and authenticate using email/password, in addition to GitHub. Sign up
2021-02-02
HCP Consul General Availability: HCP Consul is now generally available on AWS. HCP Consul is a fully managed service mesh to discover and securely connect any service. Read more
2021-01-14
HCP Vault Public Beta: HashiCorp Vault is now available on HashiCorp Cloud Platform in public beta. Read more