cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
Version 1.11.0-alpha.0 is the first alpha release of 1.11 and is not suitable for production use.
Changes since v1.10.0
Feature
- Introducing UseCertificateRequestBasicConstraints feature flag to enable Basic Constraints in the Certificate Signing Request (#5552, @sathyanarays)
- Signers fire an event on CertificateRequests which have not been approved yet. Used for informational purposes so users understand why a request is not progressing. (#5535, @JoshVanL)
Bug or Regression
- Fix
golang.org/x/textvulnerability (#5562, @SgtCoDFish) - The Venafi Issuer now supports TLS 1.2 renegotiation, so that it can connect to TPP servers where the vedauth API endpoints are configured to accept client certificates. (Note: This does not mean that the Venafi Issuer supports client certificate authentication). (#5568, @wallrj)
- Upgrade to latest go minor release (#5559, @SgtCoDFish)