What's Changed#
feat(rotated-secrets): rotate MSSQL logins, MongoDB users and Oracle users through an admin login your Burrow signs in with, on SQL Server 2012, MongoDB 4.4 and Oracle Database 19c or newer
feat(rotated-secrets): change a login's password on every replica of a SQL Server availability group, and leave every replica with the password it had when one can't take the new one
feat(rotated-secrets): rotate MongoDB users on a single server, a replica set, or a sharded cluster through mongos
feat(rotated-secrets): rotate an Oracle pluggable database's own users, or common users through the root, and end the gradual rollover a profile starts with each change, so only the new password signs in
feat(rotated-secrets): warn in the New rotated secret form when an Oracle user's profile expires its password before the schedule would rotate it
feat(dynamic-secrets): add Oracle secrets, which give each machine its own user in an Oracle pluggable database with the grants you choose, over TLS or Oracle's native network encryption, dropped when its login ends (Oracle Database 19c or newer)
feat(dynamic-secrets): build an Oracle login's grants in the dashboard from a schema and the tables you pick
feat(dynamic-secrets): end a revoked Oracle login's open sessions on every instance, and keep a login that made tables of its own locked, dropping it once its tables are moved or dropped
improvement(rotated-secrets): send a password change that waited for its database server within 15 seconds of the server being back, where it could wait up to 10 minutes
improvement(dynamic-secrets): report a MongoDB admin login the server turns away in MongoDB's own words, such as "MongoDB refused the admin login: Authentication failed."
improvement(logs): keep only the MongoDB driver's warnings and errors in your Burrow's log, so its connection messages no longer fill the Console
fix(downloads): the Linux x86-64 download starts on Ubuntu 22.04, Debian 12, RHEL, Rocky and Alma Linux 9, and Amazon Linux 2023 (it stopped at once asking for a newer glibc)
fix(shutdown): stop in order on Ctrl+C,
systemctl stopanddocker stop, finishing your Burrow's work and closing its database before it exits, without the connection warnings it logged while stoppingfix(downloads): give your terminal back only once your Burrow has stopped, and let it finish stopping before its Docker container ends (new downloads and the new Docker image)
fix(linux): count
systemctl stop burrowas a clean stop, where the service was marked failed (the serviceinstall-systemd.shinstalls from a new download)fix(rotated-secrets): create a rotated secret for a PostgreSQL, MySQL or MariaDB account with
ratel secret create --rotated, which stopped with "Database is required." even with--database, and change its database withratel rotated connectionfix(rotated-secrets): record one start in the audit log, and send one
secret.rotated.rotate.startwebhook, for a password change that waits for its node or server (every retry added another)fix(dynamic-secrets): wrap the lines of a new dynamic secret's review between words (its password line broke inside a word)