HashiCorp Vault 1.11 Adds Kubernetes Secrets Engine, PKI Updates, and More

Vault 1.11 focuses on improving its core workflows and making key features production-ready, including a new Kubernetes secrets engine that dynamically generates credentials for Kubernetes service accounts, improved KV (key-value) secrets engine usability, support for the PKI engine for non-disruptive rotation, enablement of bring your own key (BYOK) for Transit, and many other improvements. The release also includes integrated storage autopilot with seamless automated upgrades and redundancy zones to improve cluster resiliency, as well as updates to the KV secrets engine utilities, Transform secret engine, and other features such as Kubernetes Helm chart and agent sidecar injector, Kubernetes Vault CSI provider, and mount filters support removal.