[github.com/gardener/gardener-extension-shoot-cert-service:v1.67.0]

🐛 Bug Fixes

• [OPERATOR] Seed-class delete not cleaning up wildcard cert and DNS credential secret by @MartinWeindel [#635]
• [OPERATOR] Guard control plane cert deletion with ownership label by @MartinWeindel [#629]
• [OPERATOR] Fix restrictIssuer domain restriction not being applied by @MartinWeindel [#626]

🏃 Others

• [OPERATOR] Reject tenant issuers colliding with the default issuer name by @MartinWeindel [#628]
• [OPERATOR] Scope in-cluster-ACME NetworkPolicy to cert-controller-manager pods by @MartinWeindel [#627]

[github.com/gardener/cert-management:v0.29.0]

✨ New Features

• [USER] With the new --namespace-restriction option (off by default), cert-controller-manager prevents cross-namespace certificate reuse: a certificate can no longer obtain a secret or reference an issuer in another namespace. See Restricting certificates to their own namespace. by @MartinWeindel [#847]

🐛 Bug Fixes

• [OPERATOR] Normalize domain ranges in IsInDomainRange() method. by @MartinWeindel [#861]
• [OPERATOR] Guard scheduledReconciliations map with mutex by @MartinWeindel [#863]

🏃 Others

• [OPERATOR] fix: cap CNAME chain length in FollowCNAMEs by @MartinWeindel [#860]
• [OPERATOR] fix: prevent tenant secretLabels from overwriting reserved labels by @MartinWeindel [#859]

application/spdx+json

• gardener-extension-shoot-cert-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service@sha256:867ea6f70e49026cb7e27abd465e799387d45c4f1f1e6c58da06416f52e898ad
• gardener-extension-shoot-cert-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service@sha256:8f470b75a64f2bb32509552f93a589b93f37dd27f3e117a8aed1924e2b0c3445

application/vnd.cyclonedx+json

• gardener-extension-shoot-cert-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service@sha256:8fd75f97bf14f5470bf4bbde7f282fb4ce77f8f5c44aca8ad037e951d2258c70
• gardener-extension-shoot-cert-service-sbom-ref: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service@sha256:a67be5e3ce0b3b6d8897457b4d8870e58607cfbd84bcec222839a18868a72108

Helm Charts

• shoot-cert-service: europe-docker.pkg.dev/gardener-project/releases/charts/gardener/extensions/shoot-cert-service:v1.67.0

Container (OCI) Images

• gardener-extension-shoot-cert-service: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/shoot-cert-service:v1.67.0