Skip to content

Documentation v0.1.35 release notes

This documentation release clarifies installation prerequisites, published component behavior and the limits of deployment evidence. See component versions for the dated list of published component releases.

Changes

  • Installation guidance now includes complete site network prerequisites, explicit direct-mode relay CIDR removal, the optional NodeLocal DNS address and the published relay address default.
  • Store installation and maintenance distinguish released CLI qualification for exact OpenBao 2.6.4 from the next CLI's unreleased version matrix, companion chart incompatibilities and next-CLI apply-plan permissions.
  • Wrapper guidance follows published v0.2.210 strict memory defaults, allocation tiers, rotation overlap, cleanup and core-collector limits, token-copy exposure and the shipped environment allowlist.
  • Published component releases are shown separately from the versions used in existing installation examples. The release of agent v0.13.168 or wrapper v0.2.210 does not establish that a new deployment has been tested.
  • Strict node kernel requirements explain BPF LSM, securityfs, BTF, function error injection and IA32 restrictions. Distribution guidance distinguishes expected support from observed failures. The assessment checklist describes the next CLI and is not a released CLI capability.
  • Status provenance explains the next release's distinction between measured observations, configuration deductions and planned controls. The v2 attestation fields and signatures remain unreleased.

Publication and qualification boundaries

CLI v0.19.180 and chart 1.0.361 are published source inputs. New runtime paths on unreleased component candidates need separate signed releases and qualification. Pending kernel assessment, enforcement-anchor measurements and managed-proxy behavior remain labelled as next-release work. These notes publish no component binaries, chart, signed image or qualification result.

The in-cluster store guide remains a pre-publication chart candidate. A matching signed release, its final installation guide and live validation are still required before an attended deployment. Its command examples are not an installation path for the currently published chart. Managed proxies remain direct-only preview work in the next matched release; Port/relay support is not qualified.

Existing versioned installation examples and recorded platform results retain their original versions and evidence limits. This documentation release does not establish live installation, high availability, kernel enforcement, recovery, application delivery or cloud qualification.