cert-manager-csi-driver enables issuing secretless X.509 certificates for pods using cert-manager!
This is primarily a security release. It updates github.com/cert-manager/csi-lib to v0.12.0 and bumps all vulnerable dependencies reported by govulncheck, including google.golang.org/x/text (GO-2026-5970), google.golang.org/grpc (GO-2026-6061) and go.opentelemetry.io/otel (GHSA-5wrp-cwcj-q835), and the images are built with Go 1.26.5 to pick up the latest Go standard library security fixes.
The livenessprobe and csi-node-driver-registrar sidecar images have been updated to v2.19.0 and v2.17.0 respectively, and their versions are now kept up to date automatically by Renovate.
This release also adds new --gate-backoff-* flags and Helm values for tuning how csi-driver retries while waiting for pod readiness gates, and the readiness gate feature now reads pods from a node-scoped informer cache.
What's Changed
Important changes
- feat: readinessgate reads pods from a node-scoped informer cache by @patyogesh20 in #663
- wire csi-lib GateBackoffConfig as --gate-backoff-* flags and Helm values by @patyogesh20 in #682
- fix(deps): update misc go deps (includes github.com/cert-manager/csi-lib v0.12.0) by @renovate[bot] in #698
- chore(deps): update module golang.org/x/text to v0.39.0 [security] by @renovate[bot] in #703
- chore(deps): update module google.golang.org/grpc to v1.82.1 [security] by @renovate[bot] in #704
- chore(deps): update module go.opentelemetry.io/otel to v1.44.0 [security] by @renovate[bot] in #706
- chore: let Renovate manage the sidecar image tags in make/00_mod.mk by @wallrj in #715
- chore(deps): update registry.k8s.io/sig-storage/livenessprobe docker tag to v2.19.0 by @renovate[bot] in #718
- chore(deps): update registry.k8s.io/sig-storage/csi-node-driver-registrar docker tag to v2.17.0 by @renovate[bot] in #717
CI / Bumps
- chore(deps): update module golang.org/x/net to v0.55.0 [security] by @renovate[bot] in #653
- chore(deps): update module golang.org/x/crypto to v0.52.0 [security] by @renovate[bot] in #652
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #649
- chore(deps): update docker/login-action action to v4.2.0 by @renovate[bot] in #651
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #654
- chore(deps): update misc github actions to v6.0.3 by @renovate[bot] in #655
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #656
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #657
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #658
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #659
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #660
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #661
- fix(deps): update golang.org/x deps to v0.21.0 by @renovate[bot] in #662
- fix(deps): update misc go deps to v0.7.2 by @renovate[bot] in #664
- fix(deps): update github.com/onsi deps to v2.30.0 by @renovate[bot] in #665
- fix(deps): update kubernetes go patches to v0.36.2 by @renovate[bot] in #666
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #667
- fix(deps): update github.com/onsi deps by @renovate[bot] in #668
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #670
- chore(deps): update makefile modules to 7835ffe by @renovate[bot] in #671
- chore(deps): update makefile modules to 92aeb18 by @renovate[bot] in #673
- chore(deps): update makefile modules to 5d90d75 by @renovate[bot] in #674
- chore(deps): update misc github actions to v7 by @renovate[bot] in #675
- chore(deps): update makefile modules to 3968a05 by @renovate[bot] in #676
- chore(deps): update makefile modules to 6c59e94 by @renovate[bot] in #677
- chore(deps): update makefile modules to 2439727 by @renovate[bot] in #678
- chore(deps): update makefile modules to 5a6dfa5 by @renovate[bot] in #680
- fix(deps): update module github.com/onsi/ginkgo/v2 to v2.32.0 by @renovate[bot] in #679
- fix(deps): update module github.com/cert-manager/cert-manager to v1.20.3 by @renovate[bot] in #681
- fix(deps): update module github.com/onsi/gomega to v1.42.1 by @renovate[bot] in #683
- chore(deps): update actions/setup-go action to v6.5.0 by @renovate[bot] in #684
- fix(deps): update module software.sslmate.com/src/go-pkcs12 to v0.7.3 by @renovate[bot] in #686
- chore(deps): update makefile modules to 3475385 by @renovate[bot] in #685
- chore(deps): update makefile modules to fb0281c by @renovate[bot] in #687
- chore(deps): update makefile modules to 72b0d34 by @renovate[bot] in #688
- fix(deps): update module github.com/cert-manager/csi-lib to v0.11.0 by @renovate[bot] in #690
- chore(deps): update makefile modules to c9f456a by @renovate[bot] in #689
- chore(deps): update docker/login-action action to v4.3.0 by @renovate[bot] in #691
- chore(deps): update makefile modules to 6ec965f by @renovate[bot] in #692
- chore(deps): update docker/login-action action to v4.4.0 by @renovate[bot] in #693
- chore(deps): update makefile modules to 1a9e320 by @renovate[bot] in #694
- chore(deps): update makefile modules to e18d942 by @renovate[bot] in #695
- chore(deps): update makefile modules to 80a790b by @renovate[bot] in #696
- fix(deps): update module golang.org/x/sync to v0.22.0 by @renovate[bot] in #697
- chore(deps): update makefile modules to 2f12511 by @renovate[bot] in #699
- chore(deps): update makefile modules to 703bbcc by @renovate[bot] in #701
- fix(deps): update kubernetes go patches to v0.36.3 by @renovate[bot] in #707
- chore(deps): update makefile modules to 57b5681 by @renovate[bot] in #709
- chore(deps): update makefile modules to 21ae050 by @renovate[bot] in #710
- chore(deps): update actions/setup-go action to v7 by @renovate[bot] in #702
- chore(deps): update misc github actions by @renovate[bot] in #705
- chore(deps): update makefile modules to 556e163 by @renovate[bot] in #714
- fix(deps): update module k8s.io/kubectl to v0.36.3 by @renovate[bot] in #708
Full Changelog: v0.15.0...v0.16.0