github cert-manager/istio-csr v0.14.0

2 days ago

istio-csr integrates cert-manager into Istio, allowing you to issue workload certificates using the power of cert-manager.

v0.14.0 is a minor released focused around dependency upgrades and minor bugfixes. We recommend that all users upgrade to this latest version.

Importantly, this version of istio-csr depends on a patched version of cert-manager providing protections against GHSA-r4pg-vg54-wxx4 when parsing trust bundles - although exploitation would require an attacker to have privileged access inside your cluster and the effects of an exploit would be minimal.

What's Changed

Bug Fixes

  • Use istiod- as the prefix for the DNS names for Istio revisions by @wallrj in #454
  • Fix helm chart typos by @wallrj in #458
  • Use specialised function for decoding trust bundles by @SgtCoDFish in #477
  • Fix some more grammatical mistakes and typos in the comments of Helm chart values.yaml by @wallrj in #460

Other

  • Add Helm chart OCI release to GH automation by @inteon in #457

Dependency Updates

Makefile Modules Upgrades

  • [CI] Merge self-upgrade-main into main by @github-actions in #445
  • [CI] Merge self-upgrade-main into main by @github-actions in #447
  • [CI] Merge self-upgrade-main into main by @github-actions in #448
  • [CI] Merge self-upgrade-main into main by @github-actions in #450
  • [CI] Merge self-upgrade-main into main by @github-actions in #452
  • [CI] Merge self-upgrade-main into main by @github-actions in #456
  • [CI] Self-upgrade merging self-upgrade-main into main by @inteon in #461
  • [CI] Self-upgrade merging self-upgrade-main into main by @inteon in #466
  • [CI] Self-upgrade merging self-upgrade-main into main by @inteon in #470
  • [CI] Merge self-upgrade-main into main by @github-actions in #476
  • [CI] Merge self-upgrade-main into main by @github-actions in #480
  • [CI] Merge self-upgrade-main into main by @github-actions in #484

Full Changelog: v0.13.0...v0.14.0

Don't miss a new istio-csr release

NewReleases is sending notifications on new releases.