Warpgate Bastion 0.30 released with Vault/OpenBao and SSH certificate auth support
Warpgate is a FOSS bastion-style PAM that needs neither a client app nor a server-side agent. It's an alternative to Teleport/StrongDM/Hashicorp Boundary: warpgate.null.page After a turbulent month of development I'm proud to publish Warpgate 0.30 - adding a few of the most requested features Vault/OpenBao support as secrest stores - integrated into target options (reference passwords and private keys) Short-lived SSH certificate authentication for targets - issued by Vault/OpenBao This allows you to decouple target credential management from Warpgate itself and rotate secrets centrally. My focus for the next release is most likely going to be building a full IaC / GitOps workflow - if you're interested, consider chiming in at github.com/warp-tech/warpgate/discussions/2482 Full release notes: github.com/warp-tech/warpgate/releases/tag/v0.30.0