trust-manager is the easiest way to manage security-critical TLS trust bundles in Kubernetes and OpenShift clusters.
What's Changed
This release is a feature release, but as usual, it contains various patches/fixes, test improvements, and dependency bumps.
⚠️ Since Debian Bullseye is now EOL, we've stopped pushing updates to our trust bundle based on Debian Bullseye. If you are still using this bundle, you should migrate to our currently supported bundle images based on public CA certificates in Debian Bookworm or Trixie (the current default).
Thanks to all contributors! ❤️ 🚀
Features
- feat: log applied data and binaryData keys when syncing bundle targets by @jojinkb in #1046
- Remove Debian Bullseye (EOL) trust bundle by @erikgb in #1085
- Add --tls-curve-preferences for the webhook server by @arun717 in #1089
Fixes
- fix: include PKCS12 profile in target hash so profile changes trigger an update by @archy-rock3t-cloud in #1049
- Replace os.Exit with panic in map-func event handler by @erikgb in #1065
- Inject CA from Certificate Secret directly instead of via Certificate by @zeusal in #1078
- Reuse the target version suffix in exact mode by @wallrj in #1087
Other
- fix(deps): update module software.sslmate.com/src/go-pkcs12 to v0.7.3 by @renovate[bot] in #1026
- chore(deps): update makefile modules to fb0281c by @renovate[bot] in #1027
- chore(deps): update makefile modules to c9f456a by @renovate[bot] in #1028
- chore(deps): update docker/login-action action to v4.3.0 by @renovate[bot] in #1029
- chore(deps): update docker/login-action action to v4.4.0 by @renovate[bot] in #1031
- chore(deps): update makefile modules to 6ec965f by @renovate[bot] in #1030
- chore(deps): update makefile modules to 1a9e320 by @renovate[bot] in #1032
- chore(deps): update makefile modules to a6f1dc0 by @renovate[bot] in #1033
- chore(deps): update makefile modules to e18d942 by @renovate[bot] in #1034
- chore(deps): update makefile modules to 80a790b by @renovate[bot] in #1035
- chore(deps): update makefile modules to 2f12511 by @renovate[bot] in #1037
- fix(deps): update module sigs.k8s.io/structured-merge-diff/v6 to v6.4.2 by @renovate[bot] in #1036
- chore(deps): update makefile modules to b7c9d73 by @renovate[bot] in #1038
- chore(deps): update makefile modules to 703bbcc by @renovate[bot] in #1040
- chore(deps): update makefile modules to 57b5681 by @renovate[bot] in #1050
- chore(deps): update makefile modules to e0878ff by @renovate[bot] in #1051
- chore(deps): update makefile modules to 556e163 by @renovate[bot] in #1052
- chore(deps): update actions/setup-go action to v7 by @renovate[bot] in #1041
- fix(deps): update kubernetes go patches to v0.36.3 by @renovate[bot] in #1047
- chore(deps): update module golang.org/x/text to v0.39.0 [security] by @renovate[bot] in #1053
- chore(deps): update misc github actions by @renovate[bot] in #1043
- chore(deps): update makefile modules to b41c15b by @renovate[bot] in #1054
- fix(deps): update k8s.io/utils digest to cf1189d by @renovate[bot] in #1055
- fix(deps): update module github.com/go-logr/logr to v1.4.4 by @renovate[bot] in #1056
- chore(deps): update makefile modules to a09232d by @renovate[bot] in #1057
- chore(deps): update makefile modules to 2c4a3b8 by @renovate[bot] in #1060
- [CI] Merge trust-package-upgrade-debian-bullseye-main into main by @github-actions[bot] in #1058
- [CI] Merge trust-package-upgrade-debian-bookworm-main into main by @github-actions[bot] in #1059
- Add explicit unit tests for v1alpha1 Bundle conversion by @archy-rock3t-cloud in #921
- chore(deps): update module golang.org/x/mod to v0.40.0 [security] by @renovate[bot] in #1061
- fix(deps): update module github.com/onsi/ginkgo/v2 to v2.32.1 by @renovate[bot] in #1062
- chore(deps): update makefile modules to b514cb5 by @renovate[bot] in #1063
- chore(deps): update makefile modules to 24aa843 by @renovate[bot] in #1067
- fix(deps): update module github.com/stretchr/testify to v1.12.0 by @renovate[bot] in #1066
- chore(deps): update makefile modules to ca8dd5c by @renovate[bot] in #1069
- chore(deps): update makefile modules to 4dc1d67 by @renovate[bot] in #1071
- fix(deps): update kubernetes go patches to v0.36.4 by @renovate[bot] in #1073
- chore(deps): update makefile modules to b903033 by @renovate[bot] in #1072
- chore(deps): update makefile modules to b903033 by @renovate[bot] in #1075
- fix(deps): update module github.com/stretchr/testify to v1.12.1 by @renovate[bot] in #1074
- chore(deps): update makefile modules to 62d18d0 by @renovate[bot] in #1076
- chore(deps): update makefile modules to 555e973 by @renovate[bot] in #1077
- chore(deps): update makefile modules to c236200 by @renovate[bot] in #1079
- Bump KAL to the latest pseudo-version by @erikgb in #1080
- Adopt the shared kube-api-linter makefile module by @wallrj in #1070
- chore(deps): update kube-api-linter digest to c236200 by @renovate[bot] in #1082
- fix(deps): update kubernetes go deps to v0.37.0 by @renovate[bot] in #1081
- chore(deps): update makefile modules to 1745d14 by @renovate[bot] in #1083
- fix(deps): update module github.com/onsi/gomega to v1.43.0 by @renovate[bot] in #1084
- chore(deps): update makefile modules to 44a7b02 by @renovate[bot] in #1091
- chore(deps): update module golang.org/x/crypto to v0.56.0 [security] by @renovate[bot] in #1092
- Bump default CAs bundle version to trigger release by @erikgb in #1086
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.25.0 by @renovate[bot] in #1093
- chore(deps): update makefile modules to 7b9a8ef by @renovate[bot] in #1094
- chore(deps): update makefile modules to 667adb4 by @renovate[bot] in #1095
- chore(deps): update makefile modules to 3db3dfa by @renovate[bot] in #1096
- chore(deps): update makefile modules to 3802a00 by @renovate[bot] in #1097
- chore(deps): update makefile modules to 11349e7 by @renovate[bot] in #1099
- Don't run trust-package-upgrade-debian in forks by @erikgb in #1100
- Don't run release workflows in forks by @erikgb in #1101
New Contributors
- @jojinkb made their first contribution in #1046
- @zeusal made their first contribution in #1078
- @arun717 made their first contribution in #1089
Full Changelog: v0.24.0...v0.25.0