istio-csr integrates cert-manager into Istio, allowing you to issue workload certificates using the power of cert-manager.
Huge thanks to @ciaccotaco for driving some important improvements in this release, including a positive change to root CA bundle caching in #752 and support for setting the maximum number of current reconciliations allowed in #751 (along with #723 by @tlwr).
This release also includes a change which makes it much simpler to mirror container images to self-hosted registries.
There are also several CVE fixes including CVE-2026-27138, CVE-2026-27137, CVE-2026-27142 and CVE-2026-25679.
What's Changed
Features
- Add imageRegistry/imageNamespace to Helm chart image settings by @FelixPhipps in #748
- feat: MaxConcurrentReconciles can be configured by @tlwr in #723
- Add support to helm chart for Max Concurrent Reconciles by @ciaccotaco in #751
- Cache Root CA Bundle in ConfigMap Controller by @ciaccotaco in #752
CI
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #745
- fix(deps): update module github.com/cert-manager/cert-manager to v1.19.4 by @renovate[bot] in #746
- chore(deps): update actions/setup-go action to v6.3.0 by @renovate[bot] in #747
- fix(deps): update kubernetes go patches to v0.35.2 by @renovate[bot] in #749
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #750
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #753
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.2 by @renovate[bot] in #755
- fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.3 by @renovate[bot] in #756
- fix(deps): update module k8s.io/klog/v2 to v2.140.0 by @renovate[bot] in #758
- chore(deps): update docker/login-action action to v4 by @renovate[bot] in #754
- fix(deps): update module google.golang.org/grpc to v1.79.2 by @renovate[bot] in #757
- [CI] Merge self-upgrade-main into main by @octo-sts[bot] in #759
New Contributors
- @FelixPhipps made their first contribution in #748
- @tlwr made their first contribution in #723
- @ciaccotaco made their first contribution in #751
Full Changelog: v0.15.1...v0.16.0