Skip to content

v1.15.0-beta.1

Pre-release
Pre-release
Compare
Choose a tag to compare
@jetstack-release-bot jetstack-release-bot released this 21 May 14:57
ebb5281

This is the first successful beta release of cert-manager 1.15, which will be released on 2024-06-05.

An issue was found during the release of v1.15.0-beta.0 and so that version was skipped.

Note

The cmctl and kubectl_cert-manager binaries have been moved to https://github.com/cert-manager/cmctl/releases.

📜 Changes since v1.15.0-alpha.0

Feature

  • Add hint to validation error message to help users of external issuers more easily fix the issue if they specify a Kind but forget the Group (#6913, @SgtCoDFish)
  • Add support for numeric OID types in LiteralSubject. Eg. "1.2.3.4=String Value" (#6775, @inteon)
  • Promote the LiteralCertificateSubject feature to Beta. (#7030, @inteon)
  • Promoted the AdditionalCertificateOutputFormats feature gate to Beta (enabled by default). (#6970, @erikgb)
  • The Helm chart now allows you to supply extraObjects; a list of yaml manifests which will helm will install and uninstall with the cert-manager manifests. (#6424, @gplessis)
  • Update the Route53 provider to support fetching credentials using AssumeRoleWithWebIdentity (#6878, @pwhitehead-splunk)
  • [Helm] Add optional hostAliases to cert-manager pod to allow the DNS self-check to pass in custom scenarios. (#6456, @Pionerd)
  • Graduate the DisallowInsecureCSRUsageDefinition feature gate to GA. (#6927 and #6963, @yj-yoo and @inteon)
  • GatewayAPI support has graduated to Beta. Add the --enable-gateway-api flag to enable the integration. (#6961, @ThatsMrTalbot)

Bug or Regression

  • Bump golang.org/x/net to fix CVE-2023-45288 (#6929, @SgtCoDFish)
  • DigitalOcean: Ensure that only TXT records are considered for deletion when cleaning up after an ACME challenge (#6875, @SgtCoDFish)
  • Fix ACME issuer being stuck waiting for DNS propagation when using Azure DNS with multiple instances issuing for the same FQDN (#6351, @eplightning)

Other (Cleanup or Flake)

  • Remove deprecated pkg/util/pki/ParseSubjectStringToRawDERBytes function. (#6994, @inteon)
  • Upgrade Kind to v0.23.0 and update supported node image digests (#7020, @github-actions[bot])
  • Upgrade to Go 1.22.3, fixing GO-2024-2824. (#6996, @github-actions[bot])

Design