istio-csr integrates cert-manager into Istio, allowing you to issue workload certificates using the power of cert-manager.
v0.14.0 is a minor released focused around dependency upgrades and minor bugfixes. We recommend that all users upgrade to this latest version.
Importantly, this version of istio-csr depends on a patched version of cert-manager providing protections against GHSA-r4pg-vg54-wxx4 when parsing trust bundles - although exploitation would require an attacker to have privileged access inside your cluster and the effects of an exploit would be minimal.
What's Changed
Bug Fixes
- Use
istiod-
as the prefix for the DNS names for Istio revisions by @wallrj in #454 - Fix helm chart typos by @wallrj in #458
- Use specialised function for decoding trust bundles by @SgtCoDFish in #477
- Fix some more grammatical mistakes and typos in the comments of Helm chart values.yaml by @wallrj in #460
Other
Dependency Updates
- Bump the all group with 3 updates by @dependabot in #446
- Bump the all group across 1 directory with 3 updates by @dependabot in #455
- Bump the all group across 1 directory with 6 updates by @dependabot in #462
- Bump the all group across 1 directory with 2 updates by @dependabot in #467
- Bump istio.io/api from 1.24.1 to 1.24.2 in the all group by @dependabot in #468
- Bump the all group across 1 directory with 3 updates by @dependabot in #474
- Bump the all group across 1 directory with 9 updates by @dependabot in #483
Makefile Modules Upgrades
- [CI] Merge self-upgrade-main into main by @github-actions in #445
- [CI] Merge self-upgrade-main into main by @github-actions in #447
- [CI] Merge self-upgrade-main into main by @github-actions in #448
- [CI] Merge self-upgrade-main into main by @github-actions in #450
- [CI] Merge self-upgrade-main into main by @github-actions in #452
- [CI] Merge self-upgrade-main into main by @github-actions in #456
- [CI] Self-upgrade merging self-upgrade-main into main by @inteon in #461
- [CI] Self-upgrade merging self-upgrade-main into main by @inteon in #466
- [CI] Self-upgrade merging self-upgrade-main into main by @inteon in #470
- [CI] Merge self-upgrade-main into main by @github-actions in #476
- [CI] Merge self-upgrade-main into main by @github-actions in #480
- [CI] Merge self-upgrade-main into main by @github-actions in #484
Full Changelog: v0.13.0...v0.14.0