What’s the point: New Rust, Terraform tweaks, CFEngine revs

What’s the point: New Rust, Terraform tweaks, CFEngine revs

The Rust team have released v1.40.0 of the programming language. The team have flagged up a number of key improvements, including the addition of an attribute, #[non_exhaustive], which when attached to a struct or the variant of an enum, “will prevent code outside of the crate defining it from constructing said struct or variant”. Macros and attributes have been given a general scrub up, and a series of functions and macros have been stabilised and added to the standard library. 

HashiCorp IDs orgs…

HashiCorp has tweaked Terraform so that users running the tool in a multi organisation configuration can identify the originating organisation for all audit events. Users previously had to work their way back cross referencing or querying the API to tie events back to a particular organisation. The originating organisation will now be spelled out in the event format.

…and adds Kubernetes secrets integration

Meanwhile, HashiCorp has introduced a new Kubernetes integration, allowing applications with no built-in HashiCorp Vault logic, to  leverage static and dynamic secrets sourced from Vault. Or as HashiCorp memorably describes it, it enables injecting Vault secrets into Kubernetes Pods via a sidecar. This comes via a new tool called vault-k8s, which uses the Kubernetes Mutating Admission Webhook  to intercept and augment specifically annotated pod configuration for secrets injection using Init and Sidecar containers.

CFEngine debuts latest LTS

The team behind venerable infrastructure management tool CFEngine has released CFEngine 3.15.0 LTS. The new long term supported version adds raft of improvements, including an improved query builder, and federated reporting which provides a single page of glass for reporting across suites, security zones or datacentres. The latest release drops support for Ubuntu 14.04, Debian 7, and CentOS/RHEL 5, and added support for CentOS/RHEL 8, and a file system image for use in container environments.