chore(deps): update helm release cert-manager-approver-policy to v0.25.0

[renovate]

This PR contains the following updates:

Package	Update	Change
cert-manager-approver-policy (source)	minor	v0.24.0 → v0.25.0

---

Release Notes

cert-manager/approver-policy (cert-manager-approver-policy)

v0.25.0

Compare Source

approver-policy provides a policy engine for certificates issued by cert-manager!

This release is a feature release with some notable changes, but it also contains a fix to #​819, which we spent some time investigating.

Notable Changes

⚠️ Deprecated approverpolicy_certificaterequest_ metrics are removed (#​847). Ensure you use the replacement metrics before upgrading.

• Includes a change that makes it much simpler to mirror container images to self-hosted registries (#​814).
• Includes some performance improvements like disabling client-side rate limiting (#​857) and introduces a flag to increase the number of concurrent reconciles (#​865). Many thanks to @​BojanZelic for contributing these nice improvements to approver-policy! 🚀 As a follow-up to the fix to #​819, we have also optimized the predicates used when watching secondary resources. This should reduce the number of wasted reconciles.

What's Changed

Features

• Add imageRegistry/imageNamespace to Helm chart image settings by @​FelixPhipps in #​814
• metrics: remove deprecated approverpolicy_certificaterequest_ metrics by @​ChinonsoNwakudu in #​847
• feat: add --pprof-bind-address CLI flag by @​Copilot in #​859
• Disable client side rate limiting by @​BojanZelic in #​857
• Add flags for setting max concurrent reconciles by @​BojanZelic in #​865

Fixes

• Grant missing RBAC to old events API group by @​erikgb in #​817
• Don't mutate Helm values.yaml before a release by @​inteon in #​821
• Fix race condition with default deny and approving policies by @​archy-rock3t-cloud in #​835
• fix: correct typos in code comments and documentation by @​archy-rock3t-cloud in #​833
• Switch to using default reference over chart version by @​SgtCoDFish in #​842
• fix: use correct CEL operator <= instead of =< in examples by @​archy-rock3t-cloud in #​853
• fix: use %w verb for proper error wrapping by @​archy-rock3t-cloud in #​855
• enable the ReaderFailOnMissingInformer cache option by @​inteon in #​860
• Only call the event handler for events that are not part of the initial list by @​inteon in #​861
• Cleanup code by using cache-backed controller-runtime Client by @​erikgb in #​862
• Ensure metrics collector is registered in leader pod only by @​erikgb in #​863
• Improve CertificateRequest controller event handler by @​erikgb in #​867
• fix: correct typo in ServiceMonitor description by @​archy-rock3t-cloud in #​856

Test Improvements

• Fix flaky RBACBound test due to stale in-API server informer cache by @​inteon in #​832
• test: add unit tests for ServiceAccount CEL library by @​archy-rock3t-cloud in #​834

Bumps / CI

• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​816
• Bump cert-manager to the latest (alpha) release by @​erikgb in #​818
• chore(deps): update actions/setup-go action to v6.3.0 by @​renovate[bot] in #​820
• fix(deps): update kubernetes go patches to v0.35.2 by @​renovate[bot] in #​822
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​823
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​826
• fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.2 by @​renovate[bot] in #​828
• fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0-beta.0 by @​renovate[bot] in #​824
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​831
• fix(deps): update kubernetes go deps by @​renovate[bot] in #​829
• chore(deps): update docker/login-action action to v4 by @​renovate[bot] in #​827
• fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0 by @​renovate[bot] in #​837
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​838
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​839
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​840
• Run make generate to fix CRD in chart by @​SgtCoDFish in #​841
• Bump google.golang.org/grpc from 1.79.1 to 1.79.3 in the go_modules group across 1 directory by @​dependabot[bot] in #​844
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​846
• fix(deps): update module github.com/cert-manager/cert-manager to v1.20.1 by @​renovate[bot] in #​850
• fix(deps): update kubernetes go patches to v0.35.3 by @​renovate[bot] in #​845
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​851
• chore(deps): update actions/setup-go action to v6.4.0 by @​renovate[bot] in #​852
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​864
• chore(deps): update docker/login-action action to v4.1.0 by @​renovate[bot] in #​866
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​870
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​871
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​872
• fix(deps): update module github.com/google/cel-go to v0.28.0 by @​renovate[bot] in #​873
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​876
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​879
• fix(deps): update module github.com/cert-manager/cert-manager to v1.20.2 by @​renovate[bot] in #​878
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​880
• fix(deps): update kubernetes go patches to v0.35.4 by @​renovate[bot] in #​881
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​882
• [CI] Merge self-upgrade-main into main by @​octo-sts[bot] in #​883

New Contributors

• @​FelixPhipps made their first contribution in #​814
• @​archy-rock3t-cloud made their first contribution in #​835
• @​ChinonsoNwakudu made their first contribution in #​847
• @​Copilot made their first contribution in #​859
• @​BojanZelic made their first contribution in #​857

Full Changelog: cert-manager/approver-policy@v0.23.1...v0.25.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.