Update Helm release trust-manager to v0.7.0

[renovate]

This PR contains the following updates:

Package	Update	Change
trust-manager	minor	v0.6.0 -> v0.7.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

cert-manager/trust-manager (trust-manager)

v0.7.0

Compare Source

What's Changed

• Helm chart improvements

  • Add new optional registry and digest Helm values by @​erikgb in https://github.com/cert-manager/trust-manager/pull/154
  • HELM: add options for configuring image by @​inteon in https://github.com/cert-manager/trust-manager/pull/179
  • Update kubeVersion to allow for eks metadata at end of kubernetes ver… by @​dsand1234 in https://github.com/cert-manager/trust-manager/pull/182
  • Add extra information to the Chart.yaml file by @​inteon in https://github.com/cert-manager/trust-manager/pull/190
  • Allow enabling hostNetwork mode in Helm chart by @​cablespaghetti in https://github.com/cert-manager/trust-manager/pull/156
  • allow setting namespace for helm chart by @​vinny-sabatini in https://github.com/cert-manager/trust-manager/pull/198
  • Make seccompProfile optional in initContainer by @​aelbarkani in https://github.com/cert-manager/trust-manager/pull/118
  • add a CN for the trust-manager certificate by @​SgtCoDFish in https://github.com/cert-manager/trust-manager/pull/201
  • Allow configuring of the priorityClass by @​WatcherWhale in https://github.com/cert-manager/trust-manager/pull/176
  • Use proper namespace for webhook by @​joemccall86 in https://github.com/cert-manager/trust-manager/pull/215
  • Allow user to specify the name of cert-manager's ServiceAccount by @​SgtCoDFish in https://github.com/cert-manager/trust-manager/pull/174

• Switch to SSA

  • Refactor util functions in preparation for SSA by @​inteon in https://github.com/cert-manager/trust-manager/pull/170
  • Fix BundleStatus go definition in preparation for SSA by @​inteon in https://github.com/cert-manager/trust-manager/pull/173
  • Use SSA by @​inteon in https://github.com/cert-manager/trust-manager/pull/89
  • BUGFIX: fix migration from csa to ssa by @​inteon in https://github.com/cert-manager/trust-manager/pull/178
  • Fix SSA migration field managers by @​erikgb in https://github.com/cert-manager/trust-manager/pull/189
  • fix: add missing RBAC for CSA->SSA migration of bundles/status by @​erikgb in https://github.com/cert-manager/trust-manager/pull/191
  • FIX: For CSA to SSA migration, we need UPDATE permission on the resource (not the sub-resource) by @​inteon in https://github.com/cert-manager/trust-manager/pull/218

• Add Secret target support

  • feat: support secret as a target by @​Jiawei0227 in https://github.com/cert-manager/trust-manager/pull/193
  • BUGFIX: fix bugs in validation logic for secret target & add tests by @​inteon in https://github.com/cert-manager/trust-manager/pull/212
  • BUGFIX: support switching between target types by @​inteon in https://github.com/cert-manager/trust-manager/pull/211
  • fix: should not have have read access to all secrets when secret targets disabled by @​erikgb in https://github.com/cert-manager/trust-manager/pull/207
  • Cleanup patch functions Secret and ConfigMap targets by @​inteon in https://github.com/cert-manager/trust-manager/pull/210

• Dependency upgrades:

  • Vendor dependencies correctly by @​SgtCoDFish in https://github.com/cert-manager/trust-manager/pull/194
  • Upgrade to kubernetes 1.28 & c/r 0.16 by @​inteon in https://github.com/cert-manager/trust-manager/pull/161
  • ci: verify all generated files are up-to-date by @​erikgb in https://github.com/cert-manager/trust-manager/pull/166
  • Move from k8s.io/utils/pointer to k8s.io/utils/ptr by @​inteon in https://github.com/cert-manager/trust-manager/pull/171
  • Fix misinterpretation, ByObject cache settings are GVK specific by @​inteon in https://github.com/cert-manager/trust-manager/pull/172
  • Enable dependabot updates by @​inteon in https://github.com/cert-manager/trust-manager/pull/197
  • Bump the all group with 7 updates by @​dependabot in https://github.com/cert-manager/trust-manager/pull/202
  • Bump the all group with 1 update by @​dependabot in https://github.com/cert-manager/trust-manager/pull/206
  • Remove patch versions from go directives by @​SgtCoDFish in https://github.com/cert-manager/trust-manager/pull/209
  • Upgrade go to 1.21 by @​inteon in https://github.com/cert-manager/trust-manager/pull/204

• Support PKCS12 truststores

  • Refactor CM binary data reconcile preparing for PKCS#12 support by @​erikgb in https://github.com/cert-manager/trust-manager/pull/162
  • Add support for PKCS12 truststores by @​erikgb in https://github.com/cert-manager/trust-manager/pull/163
  • Add support for PKCS12 truststores (update CRD) by @​erikgb in https://github.com/cert-manager/trust-manager/pull/164

• Cleanup, refactor and bugfixes

  • Filter resources triggered by namespace by @​inteon in https://github.com/cert-manager/trust-manager/pull/169
  • Refactor bundle controller setup by @​erikgb in https://github.com/cert-manager/trust-manager/pull/185
  • Cleanup controller bootstrap by @​erikgb in https://github.com/cert-manager/trust-manager/pull/188
  • Add certificates deduplication feature by @​arsenalzp in https://github.com/cert-manager/trust-manager/pull/184
  • Update a couple of instances of the old project name by @​SgtCoDFish in https://github.com/cert-manager/trust-manager/pull/192
  • Fix build on macOS / values.yaml wording tweaks by @​SgtCoDFish in https://github.com/cert-manager/trust-manager/pull/200

New Contributors

• @​dsand1234 made their first contribution in https://github.com/cert-manager/trust-manager/pull/182
• @​arsenalzp made their first contribution in https://github.com/cert-manager/trust-manager/pull/184
• @​cablespaghetti made their first contribution in https://github.com/cert-manager/trust-manager/pull/156
• @​vinny-sabatini made their first contribution in https://github.com/cert-manager/trust-manager/pull/198
• @​Jiawei0227 made their first contribution in https://github.com/cert-manager/trust-manager/pull/193
• @​aelbarkani made their first contribution in https://github.com/cert-manager/trust-manager/pull/118
• @​dependabot made their first contribution in https://github.com/cert-manager/trust-manager/pull/202
• @​WatcherWhale made their first contribution in https://github.com/cert-manager/trust-manager/pull/176
• @​joemccall86 made their first contribution in https://github.com/cert-manager/trust-manager/pull/215

Full Changelog: cert-manager/trust-manager@v0.6.0...v0.7.0

v0.6.1

Compare Source

trust-manager is the easiest way to manage security-critical trust bundles in Kubernetes and OpenShift clusters.

v0.6.1 is intended to fix CVE-2023-44487 and CVE-2023-39325, which relate to HTTP/2 servers in Go.

We have no particular reason to think that trust-manager was specifically vulnerable to (or even impacted by) these CVEs, but given their prominence we thought it best to patch them.

What's Changed

• [release-0.6] Bump deps to fix CVEs by @​SgtCoDFish in https://github.com/cert-manager/trust-manager/pull/208

Full Changelog: cert-manager/trust-manager@v0.6.0...v0.6.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.