trust-manager is the easiest way to manage security-critical TLS trust bundles in Kubernetes and OpenShift clusters.
This release includes a change which makes it much simpler to mirror container images to self-hosted registries.
There are also several CVE fixes including CVE-2026-27138, CVE-2026-27137, CVE-2026-27142 and CVE-2026-25679.
What's Changed
Features
- Add imageRegistry/imageNamespace to Helm chart image settings by @FelixPhipps in #897
Internal
Bumps / CI
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #894
- chore(deps): update actions/setup-go action to v6.3.0 by @renovate[bot] in #896
- fix(deps): update kubernetes go patches to v0.35.2 by @renovate[bot] in #898
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #899
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #901
- [CI] Merge trust-package-upgrade-debian-bullseye-main into main by @github-actions[bot] in #890
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.2 by @renovate[bot] in #903
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.3 by @renovate[bot] in #904
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #906
- chore(deps): update docker/login-action action to v4 by @renovate[bot] in #902
- fix(deps): update module k8s.io/klog/v2 to v2.140.0 by @renovate[bot] in #905
- Bump trust packages to force rebuild with go 1.26.1 by @SgtCoDFish in #907
New Contributors
- @FelixPhipps made their first contribution in #897
Full Changelog: v0.21.1...v0.22.0