You are looking at the documentation of a prior release. To read the documentation of the latest release, please visit here.

KubeVault v2026.7.24-rc.2 (2026-07-25)

kubevault/apimachinery

v0.25.0-rc.2

  • 9506b557 Add tenant-namespace API for automatic OpenBao namespaces (#156)
  • ba64406c Add spec.exposePrimary and the ClientTrafficPinned condition (#164)
  • aecac0c3 Modernize golangci-lint config (#162)
  • 0f322b76 Rename Vault Agent Leftovers (#161)
  • db14309e Use vr as shortname for VaultRelay
  • 19e335e6 Rename VaultAgent CRD to VaultRelay (agent->relay) (#158)
  • c2df818e Name the spoke kubernetes-auth role k8s-- (#155)
  • e584cf38 Add VaultAgent and OCM agent placement API to VaultServer (#137)
  • b177c3ef Bump go.bytebuilders.dev/audit to v0.0.52 (#135)
  • 50440b1b Update go.bytebuilders.dev/audit to v0.0.51 (#134)
  • 3b2e0d05 Add CLAUDE.md pointing to AGENTS.md
  • 258f03b3 Fix release tracker workflow

kubevault/cli

v0.25.0-rc.2

  • 5461dc81 Prepare for release v0.25.0-rc.2 (#230)
  • 7866f7d3 Modernize golangci-lint config (#229)
  • 0f49286d Drop kubevault.dev/apimachinery/client dependency (#228)
  • 3832c2fc Add CLAUDE.md pointing to AGENTS.md
  • 4839a579 Fix release tracker workflow

kubevault/installer

v2026.7.24-rc.2

  • 49c7e5fe Prepare for release v2026.7.24-rc.2 (#464)
  • f3fb56eb Remove update command for kubevault-certified chart (#463)
  • 9e4e586d Fetch kubevault-certified chart dependencies before regenerating it; add OpenShift chart-verify script (#462)
  • 1564d541 Sync CRDs for tenant isolation (spec.isolateTenants, NamespaceSlice) (#461)
  • 87362390 Sync vaultserver CRDs for spec.exposePrimary and fix the pods-patch comment (#460)
  • f35219c6 Add make refresh target and require it before opening a PR (#459)
  • b8a96caa Grant the operator pods patch for role labeling (#458)
  • 761ddb47 Clean up cves
  • 62c8c74b Build kubevault-certified dependencies in update-chart-dependencies.sh (#457)
  • f2fff71b Add reproducible make targets for catalog and certified charts (#456)
  • 33f8eca6 Modernize golangci-lint config (#455)
  • 64741473 Add Additional Rules in Cluster Role (#454)
  • 42ae5979 Rename VaultAgent to VaultRelay in charts/CRDs (agent->relay) (#452)
  • 4e174433 Support OCM hub-driven VaultAgent placement in operator charts (#449)
  • 3ed9e4bb catalog: mark pre-1.10 Vault versions as deprecated (#451)
  • 39b17213 Add audit-token-requester ClusterRoleBinding to charts (#450)
  • 7a88fdf7 Fix charts (#448)
  • b35a72b6 feat(charts): Phase 7 webhook host + –register-crds + VaultServer conversion webhook (#444)
  • 5d791450 Use ace-user-roles v2026.6.12 with audit cluster role (#446)
  • ef9df4ab Add docker.io prefix to Docker Hub images (#447)
  • 82acef9e Add CLAUDE.md pointing to AGENTS.md

kubevault/operator

v0.25.0-rc.2

  • 5b9c0ed9 Merge commit ‘2fcebcc9b329cba16769d030cd5e5bc666b35b75’ into release-0.25

kubevault/unsealer

v0.25.0-rc.2

  • 0f6a92ca Modernize golangci-lint config (#162)
  • d2717085 add namespace policy (#161)
  • a34e6891 Grant policy-controller the relay/* backend paths (hub-spoke placement) (#160)
  • a7fe869a Add CLAUDE.md pointing to AGENTS.md
  • 3b5bf9c4 Fix release tracker workflow