This release supports v1 of the Google CAS API.
The semantics of Issuers and ClusterIssuers have changed to reflect the upstream changes. The API version of cas-issuer.jetstack.io is now v1beta1 to break compatibility with the previous releases.
Users should now reference a CA pool to sign their certificates, rather than a specific certificate authority. An example Issuer is:
apiVersion: cas-issuer.jetstack.io/v1beta1
kind: GoogleCASIssuer
metadata:
name: googlecasissuer-sample
spec:
project: my-gcp-project
location: us-east1
caPoolId: my-pool
# credentials are optional if workload identity is enabled
credentials:
name: "my-secret-key"
key: "my-gcp-project-key.json"Docker images are available at quay.io/jetstack/cert-manager-google-cas-issuer:0.5.0
One-line install: kubectl apply -f https://github.com/jetstack/google-cas-issuer/releases/download/v0.5.0/google-cas-issuer-v0.5.0.yaml