trust-manager is the easiest way to manage security-critical TLS trust bundles in Kubernetes and OpenShift clusters.
This release contains a few new features, in particular an update of the default CA trust bundle to the latest version available in Debian Bookworm. Huge thanks to @hawksight for identifying and fixing a bug in our CI that prevented the bundle from getting minor updates from upstream Debian.
We are also working on the new ClusterBundle API, which will replace the Bundle API.
What's Changed
Features
- feat: Bump the ca-certificates package to 20230311+deb12u1 by @hawksight in #643
- Make bundle target optional by @erikgb in #661
- feat: Update trust-manager default trust bundle to newest version by @hawksight in #667
- feat(helm): Support revisionhistorylimit by @DrFaust92 in #676
- feat: Add a global value of enabled for wrapping trust-manager chart by @hawksight in #680
Fixes
- Make Bundle webhook configuration precise by @erikgb in #670
- Improve webhook setup and probes by @erikgb in #671
New ClusterBundle API (non-user-facing)
These changes help to prepare trust-manager for the next evolution of its design. None of these changes are available to be used yet.
- ClusterBundle source API rework by @erikgb in #647
- Final minor adjustments to new ClusterBundle API by @erikgb in #658
- Add generated CRD for new ClusterBundle API by @erikgb in #662
- Add ClusterBundle API validations by @erikgb in #664
- Add ClusterBundle validating webhook by @erikgb in #668
Other
- Use controller-gen to generate applyconfigurations by @erikgb in #657
- refactor: dedicated struct for building source data by @erikgb in #648
- Migrate test from JKS to PKCS#12 by @erikgb in #607
- refactor: split target apply and cleanup by @erikgb in #660
- Refactor scheme setup to support multi-group APIs by @erikgb in #669
- feat: Add hawksight as reviewer by @hawksight in #678
- Remove use of deprecated c/r Requeue by @erikgb in #673
- Remove use of deprecated c/r EventBroadcaster by @erikgb in #672
Dependabot updates
- build(deps): Bump the all group with 5 updates by @dependabot[bot] in #653
- build(deps): Bump the all group across 1 directory with 3 updates by @dependabot[bot] in #665
- build(deps): Bump actions/checkout from 4 to 5 in the all group by @dependabot[bot] in #684
makefile-modules updates
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #646
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #649
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #651
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #652
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #655
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #663
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #674
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #675
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #677
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #679
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #682
- [CI] Merge self-upgrade-main into main by @github-actions[bot] in #685
New Contributors
- @hawksight made their first contribution in #643
Full Changelog: v0.18.0...v0.19.0