🚨 Breaking or Notable
-
The per-namespace wildcard certificate provisioner has been integrated into the base controllers
and is now controlled by the namespace-wildcard-cert-selector field. This field allows you
to use a Kubernetes LabelSelector to choose which namespaces should have certificates
provisioned.To migrate existing usage of the serving-nscert controller, do the following:
-
Set the namespace-wildcard-cert-selector to the value:
matchExpressions: - key: "networking.knative.dev/disableWildcardCert" operator: "NotIn" values: ["true"]
-
Remove the Deployment, Service and ClusterRole defined by the serving-nscert.yaml resources
in the previous release. (#12174, @evankanderson)
-
💫 New Features & Changes
- Per-namespace wildcard certificate provisioning has been integrated into the main
Knative controllers and is no longer a separate install. It is now controlled by a
label selector on Kubernetes namespaces. - A new experimental feature, "concurrencyStateEndpoint", allows a webhook to be informed when a container's concurrency goes to/from zero (#11802, #12162, #11917, @psschwei)
- When mesh compatibility mode is not set to "auto" in the networking config map,
the activator will respect Kubernetes's readiness state and avoid probing when
kubernetes readiness propagates more quickly than the activator's probe. (#12086, @julz)
🐞 Bug Fixes
- Fixes an issue where TLS certificates are requested before domain-ownership is established. (#12080, @mattmoor)
Dependencies
Added
Nothing has changed.
Changed
- cloud.google.com/go/storage: v1.10.0 → v1.18.2
- cloud.google.com/go: v0.84.0 → v0.97.0
- github.com/cncf/xds/go: fbca930 → aa0b789
- github.com/envoyproxy/go-control-plane: 63b5d3c → cf90f65
- github.com/golang/mock: v1.5.0 → v1.6.0
- github.com/google/pprof: 01bbb19 → 4bb14d4
- github.com/googleapis/gax-go/v2: v2.0.5 → v2.1.1
- github.com/prometheus/common: v0.30.0 → v0.31.1
- github.com/yuin/goldmark: v1.3.5 → v1.4.0
- go.uber.org/goleak: v1.1.10 → 6911603
- go.uber.org/zap: v1.19.0 → v1.19.1
- golang.org/x/net: e898025 → 4f30a5c
- golang.org/x/oauth2: 2bc19b1 → 6b3c2da
- golang.org/x/sys: 59db8d7 → d61c044
- golang.org/x/tools: v0.1.5 → v0.1.7
- google.golang.org/api: v0.50.0 → v0.58.0
- google.golang.org/genproto: 8bfb893 → 37fc393
- google.golang.org/grpc: v1.40.0 → v1.41.0
- k8s.io/gengo: de9496d → 39e73c8
- knative.dev/caching: 0184eb9 → f2af269
- knative.dev/hack: 815cd31 → b96d65a
- knative.dev/networking: 69ad454 → c3606d9
- knative.dev/pkg: 5ae4821 → 5d9d300
- sigs.k8s.io/yaml: v1.2.0 → v1.3.0
Removed
Nothing has changed.