[gardener-extension-shoot-cert-service]

⚠️ Breaking Changes

• [OPERATOR] The default leader election resource lock of gardener-extension-shoot-cert-service has been changed from configmapsleases to leases. (#89, @MartinWeindel)
  • Please make sure, that you had at least gardener-extension-shoot-cert-service@v1.13 running before upgrading to v1.18.0, so that it has successfully required leadership with the hybrid resource lock (configmapsleases) at least once.

🏃 Others

• [OPERATOR] Enable deactivation of authorizations for successful certificate requests (#90, @MartinWeindel)
• [OPERATOR] It is now possible to specify the leader election resource lock via the chart value leaderElection.resourceLock (defaults to leases). (#89, @MartinWeindel)
• [OPERATOR] Support for Kubernetes v1.22 (#88, @MartinWeindel)

[cert-management]

🐛 Bug Fixes

• [OPERATOR] fix nil pointer dereference in RememberAltIssuerSecret if an issuer secret contains no data (gardener/cert-management#85, @MartinWeindel)

🏃 Others

• [OPERATOR] No panic on failed groupkind migration (gardener/cert-management#87, @MartinWeindel)
• [OPERATOR] Support for Kubernetes v1.22 (gardener/cert-management#89, @MartinWeindel)
• [OPERATOR] Add command line flag --acme-deactivate-authorizations to enable deactivation of authorizations after a successful certificate request (gardener/cert-management#90, @MartinWeindel)