chore(deps): update helm release cert-manager to v1.11.0#888
Merged
Conversation
|
Path: @@ -51,6 +51,7 @@
app.kubernetes.io/name: webhook
app.kubernetes.io/instance: cert-manager
app.kubernetes.io/component: "webhook"
+ app.kubernetes.io/managed-by: Helm
data:
---
# Source: cert-manager/templates/cainjector-rbac.yaml
@@ -840,7 +841,7 @@
type: RuntimeDefault
containers:
- name: cert-manager-cainjector
- image: "quay.io/jetstack/cert-manager-cainjector:v1.10.0"
+ image: "quay.io/jetstack/cert-manager-cainjector:v1.11.0"
imagePullPolicy: IfNotPresent
args:
- --v=2
@@ -897,14 +898,16 @@
type: RuntimeDefault
containers:
- name: cert-manager-controller
- image: "quay.io/jetstack/cert-manager-controller:v1.10.0"
+ image: "quay.io/jetstack/cert-manager-controller:v1.11.0"
imagePullPolicy: IfNotPresent
args:
- --v=2
- --cluster-resource-namespace=$(POD_NAMESPACE)
- --leader-election-namespace=kube-system
+ - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.11.0
- --dns01-recursive-nameservers=1.1.1.1:53
- --dns01-recursive-nameservers-only
+ - --max-concurrent-challenges=60
ports:
- containerPort: 9402
name: http-metrics
@@ -962,7 +965,7 @@
type: RuntimeDefault
containers:
- name: cert-manager-webhook
- image: "quay.io/jetstack/cert-manager-webhook:v1.10.0"
+ image: "quay.io/jetstack/cert-manager-webhook:v1.11.0"
imagePullPolicy: IfNotPresent
args:
- --v=2
@@ -1203,7 +1206,7 @@
type: RuntimeDefault
containers:
- name: cert-manager-startupapicheck
- image: "quay.io/jetstack/cert-manager-ctl:v1.10.0"
+ image: "quay.io/jetstack/cert-manager-ctl:v1.11.0"
imagePullPolicy: IfNotPresent
args:
- check |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.10.0->v1.11.0⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.
Release Notes
cert-manager/cert-manager
v1.11.0Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
v1.11.0includes a drastic reduction in cert-manager's runtime memory usage, a slew of improvements to AKS integrations and various other tweaks, fixes and improvements, all towards cert-manager's goal of being the best way to handle certificates in modern Cloud Native applications.Community
Thanks again to all open-source contributors with commits in this release, including:
Thanks also to the following cert-manager maintainers for their contributions during this release:
Thanks also to the CNCF, which provides resources and support, and to the AWS open source team for being good community members and for their maintenance of the PrivateCA Issuer.
In addition, massive thanks to Jetstack (by Venafi) for contributing developer time and resources towards the continued maintenance of cert-manager projects.
Changes since cert-manager
v1.10For an overview of new features, see the v1.11 release notes!
Feature
--max-concurrent-challengescontroller flag to the helm chart (#5638, @lvyanru8200)koand redeploying cert-manager to the cluster referenced by your current KUBECONFIG context. (#5655, @wallrj)LiteralSubjectfield, all mandatory OIDs are now supported for LDAP certificates (rfc4514). (#5587, @SpectralHiss)ExperimentalGatewayAPISupportalpha feature must ensure thatv1betaof Gateway API is installed in cluster. (#5583, @lvyanru8200)Bug or Regression
vcertwas upgraded tov4.23.0, fixing two bugs in cert-manager. The first bug was preventing the Venafi issuer from renewing certificates when using TPP has been fixed. You should no longer see your certificates getting stuck withWebSDK CertRequest Module Requested CertificateorThis certificate cannot be processed while it is in an error state. Fix any errors, and then click Retry.. The second bug that was fixed prevented the use ofalgorithm: Ed25519in Certificate resources with VaaS. (#5674, @maelvls)golang/x/netto fix CVE-2022-41717 (#5632, @SgtCoDFish)golang.org/x/textvulnerability (#5562, @SgtCoDFish)extraArgsin Helm takes precedence over the new acmesolver image options (#5702, @SgtCoDFish)Other
certificate.spec.secretNameSecrets will now be labelled with thecontroller.cert-manager.io/faolabel (#5703, @irbekrm)v1.10.2Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
v1.10.2 is primarily a performance enhancement release which might reduce memory consumption by up to 50% in some cases thanks to some brilliant work by @irbekrm! 🎉
It also patches several vulnerabilities reported by scanners and updates the base images used for cert-manager containers. In addition, it removes a potentially confusing log line which had been introduced in v1.10.0 which implied that an error had occurred when using external issuers even though there'd been no error.
Changes since
v1.10.1Feature
Bug or Regression
golang.org/x/textvulnerability (#5592, @SgtCoDfish)Other (Cleanup or Flake)
v1.10.1Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
cert-manager v1.10.1 is a bug fix release which fixes a problem which prevented the Venafi Issuer from connecting to TPP servers where the vedauth API endpoints were configured to accept client certificates.
It is also compiled with a newer version of Go 1.19 (v1.19.3) which fixes some vulnerabilities in the Go standard library.
Changes since
v1.10.0Bug or Regression
vedauthAPI endpoints are configured to accept client certificates.(Note: This does not mean that the Venafi Issuer supports client certificate authentication).
(#5576, @wallrj)
(#5560, @SgtCoDFish )
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.