trust-manager is the easiest way to manage security-critical trust bundles in Kubernetes and OpenShift clusters.
v0.9.0 contains a bunch of improvements and once again the awesome trust-manager community played a huge role!
Inclusions to note are:
- We fixed a bug (#296) which broke passwordless PKCS#12 files when read by Java.
- It's possible that this could have an effect on non-Java platforms, but in testing it seemed safe for both Go and Java
- We added support for the s390x architecture for trust-manager!
- We added a
crds.keepoption to reduce the risk of losing important data when uninstalling trust-manager - We fixed an issue with certificate deduplication when certs were present in multiple sources
As always, please report any issues either here in the repo, in a cert-manager meeting or on Slack!
Happy bundling!
Special Thanks
We'd like to thank the following for their contributions, expertise, time and patience since the last trust-manager release:
- @erikgb
- @rishikakedia
- @arsenalzp
- @niklastanner
- @ditatechwriter
- @justdan96
- @arjunprasad2143
- @dilipgb
- @bmhughes
- @mnlipp
- @Jiawei0227
In addition, a warm welcome to our latest reviewer @ThatsMrTalbot ! 🎉
What's Changed
New Features
- 💻 Enable trust manager on s390x by @rishikakedia in #315
- Helm: Uniformize all label include statements & add labels to pod template by @inteon in #306
- Add configurable common labels by @justdan96 in #149
- Add 'crds.keep' options to generated CRDs by @inteon in #288
Bug Fixes and Resilience Improvements
- Improve certificate deduplication operation by @arsenalzp in #303
- 🐛 Fix passwordless pkcs12 files for Java by @SgtCoDFish in #307
- Set a size limit on emptyDir by @SgtCoDFish in #308
- Generate values.schema.json by @inteon in #290
- Production readiness Helm chart tweaks by @wallrj in #309
- initContainer Resource Block: Fix #295 for merging by @SgtCoDFish in #316
- Bump toolchain to latest to address CVE-2024-24783 by @SgtCoDFish in #318
Documentation and Testing
- docs: updating chart values.yaml for better comment docs by @ditatechwriter in #280
- Update README.md and Chart.yaml by @inteon in #287
- Improve OCI image options' Helm README.md documentation by @inteon in #289
- Fix typo in Chart.yaml icon URL by @inteon in #292
- test: should test setBundleCondition as it's used by @erikgb in #284
Bumps and Miscellaneous
- 🎉 Add thatsmrtalbot as a reviewer by @inteon in #293
- Bump version for release @SgtCoDFish in #314
- Two tool update PRs by @inteon (#286, #317)
- Several @dependabot PRs (#313, #298, #285, #279)
New Contributors
- @ditatechwriter made their first contribution in #280
- @justdan96 made their first contribution in #149
- @wallrj made their first contribution in #309
- @rishikakedia made their first contribution in #315
Full Changelog: v0.8.0...v0.9.0