github cert-manager/trust-manager v0.11.0

23 days ago

trust-manager is the easiest way to manage security-critical TLS trust bundles in Kubernetes and OpenShift clusters.

v0.11.0 includes support for JSON logging, as well as some bug fixes and code quality improvements which have been made since the release of trust-manager v0.10.0

Notably, this release re-adds the s390x architecture which was missing in v0.10.0 and v0.10.1 and enables several linters to ensure the codebase remains at a high level of quality.

Feature Overview: JSON Logging

Prolific contributor @erikgb added support for JSON logging in trust-manager in #354 🚀

JSON logging can be enabled through the new app.logFormat Helm value which defaults to text but can be set to json.

$ helm upgrade trust-manager jetstack/trust-manager \
  --set app.logFormat=json \
  --install \
  --namespace cert-manager \
  --wait

$ kubectl logs -n cert-manager trust-manager-xxxxx
{"time":"2024-06-03T14:05:12.468612847Z","level":"INFO","msg":"successfully loaded default package from filesystem","logger":"trust/bundle","path":"/packages/cert-manager-package-debian.json"}
...

Log Level Parsing

v0.11.0 also changes how log levels are parsed when passed in to trust-manager.

Previously, non-numeric log levels would be silently ignored, so if you set a log level of "v5" rather than "5", the setting would not take effect and the log level would default to 1. Now, log levels must be valid integers and trust-manager will fail to start if a log level is invalid.

This change will help to catch configuration errors.

What's Changed

Features

Bug Fixes

  • Fix use of system trust bundle when building package by @SgtCoDFish in #355
  • Use the go version specified in the Makefile tools module by @inteon in #364

Testing / Code Quality

  • Replace deprecated klog.New in tests with ktesting.NewTestContext by @erikgb in #352
  • Deduplicate code for syncing target configmaps and secrets by @erikgb in #356
  • Fix all linter issues and un-ignore golanci-lint linter exceptions by @inteon in #360

Docs

Version Bumps

  • [CI] Merge self-upgrade-main into main by @github-actions in #363
  • [CI] Merge self-upgrade-main into main by @github-actions in #361
  • [CI] Merge self-upgrade-main into main by @github-actions in #357
  • [CI] Merge self-upgrade-main into main by @github-actions in #351
  • [CI] Merge self-upgrade-main into main by @github-actions in #349
  • Bump the all group with 5 updates by @dependabot in #350
  • Bump the all group with 2 updates by @dependabot in #359
  • Bump the all group with 2 updates by @dependabot in #362

Full Changelog: v0.10.0...v0.11.0

Don't miss a new trust-manager release

NewReleases is sending notifications on new releases.