v1.30.0

[gardener-extension-shoot-cert-service]

🏃 Others

• [OPERATOR] Adapted extension components to support the FullNetworkPoliciesInRuntimeCluster feature gate introduced by gardener/gardener v1.66, see here and #7352 for more information. (gardener/gardener-extension-shoot-cert-service#152, @timuthy)

v1.29.0

[gardener-extension-shoot-cert-service]

🏃 Others

• [OPERATOR] Removed minAllowed.cpu from all VPA objects (gardener/gardener-extension-shoot-cert-service#149, @voelzmo)
• [DEPENDENCY] The following dependency is updated: (gardener/gardener-extension-shoot-cert-service#148, @shafeeqes)
  • github.com/gardener/gardener: v1.62.2 -> v1.65.0
  • k8s.io/* : v0.26.0 -> v0.26.1
  • sigs.k8s.io/controller-runtime: v0.13.1-> v0.14.4

[cert-management]

🐛 Bug Fixes

• [USER] Fix auto registration for issuer with external account binding. (gardener/cert-management#121, @MartinWeindel)

📖 Documentation

• [USER] Documentation for the followCNAME option (gardener/cert-management#120, @MartinWeindel)

🏃 Others

• [OPERATOR] bump builder image golang from 1.19.5 to 1.20.1 (gardener/cert-management#122, @MartinWeindel)
• [OPERATOR] k8s modules from v0.26.0 to v0.26.1 (gardener/cert-management#122, @MartinWeindel)
  • golang.org/x/net from v0.5.0 to v0.7.0

v1.28.0

[gardener-extension-shoot-cert-service]

📖 Documentation

• [USER] Document followCNAME option (gardener/gardener-extension-shoot-cert-service#143, @MartinWeindel)

🏃 Others

• [DEPENDENCY] Dependency github.com/gardener/gardener is updated v1.59.0 -> v1.62.2. (gardener/gardener-extension-shoot-cert-service#144, @MartinWeindel)

v1.27.0

[gardener-extension-shoot-cert-service]

✨ New Features

• [USER] This release adds HA support for the service's control-plane components when extension is deployed along with Gardener >= v1.60. Please see this document for more information about HA settings in shoot clusters. (gardener/gardener-extension-shoot-cert-service#138, @timuthy)
• [OPERATOR] Extension and control-plane components have been adjusted to the high availability configuration supported by Gardener as of release v1.60. See this document for more information about HA in gardener. (gardener/gardener-extension-shoot-cert-service#138, @timuthy)

🏃 Others

• [OPERATOR] shoot-cert-service no longer supports Shoots with Кubernetes version < 1.20. (gardener/gardener-extension-shoot-cert-service#139, @dimitar-kostadinov)
• [OPERATOR] New fluent operator resources are introduced: ClusterFilter, ClusterParser (gardener/gardener-extension-shoot-cert-service#140, @Kristian-ZH)
• [OPERATOR] Update builder image to golang:1.19.5 (gardener/gardener-extension-shoot-cert-service#141, @MartinWeindel)

[cert-management]

🏃 Others

• [OPERATOR] Update dependencies like controller-manager-library. (gardener/cert-management#119, @MartinWeindel)
  • Update builder image from golang:1.19.3 to golang:1.19.5

v1.26.0

[gardener-extension-shoot-cert-service]

🏃 Others

• [OPERATOR] Adds a heartbeat controller that creates and renews a Lease resource named gardener-extension-heartbeat in the namespace where the extension controller is deployed. This Lease resource can be used by other controllers to check if the shoot-cert-service extension controller is running. (gardener/gardener-extension-shoot-cert-service#135, @AleksandarSavchev)
• [DEPENDENCY] Dependency github.com/gardener/gardener is updated v1.56.0 -> v1.59.0. (gardener/gardener-extension-shoot-cert-service#135, @AleksandarSavchev)

[cert-management]

✨ New Features

• [USER] Support for storing JKS and PKCS#12 keystores in the certificate secret (gardener/cert-management#117, @MartinWeindel)

v1.25.0

[gardener-extension-shoot-cert-service]

🏃 Others

• [OPERATOR] Update builder image from golang:1.18.5 to golang:1.19.2 (gardener/gardener-extension-shoot-cert-service#133, @MartinWeindel)
• [OPERATOR] Update dependency gardener/gardener v1.52.2 to v1.56.0 (gardener/gardener-extension-shoot-cert-service#133, @MartinWeindel)

[cert-management]

🐛 Bug Fixes

• [USER] Fix for correct issuer selection by name. (gardener/cert-management#115, @MartinWeindel)

🏃 Others

• [OPERATOR] Update builder image from golang:1.18.5 to golang:1.19.2 (gardener/cert-management#114, @MartinWeindel)

v1.24.0

[gardener-extension-shoot-cert-service]

⚠️ Breaking Changes

• [OPERATOR] This version of gardener-extension-shoot-cert-service requires Gardener v1.50+. (gardener/gardener-extension-shoot-cert-service#126, @kris94)

🏃 Others

• [OPERATOR] The following dependency is updated: (gardener/gardener-extension-shoot-cert-service#130, @MartinWeindel)
  • github.com/gardener/gardener: v1.49.3 -> v1.52.2
  • k8s.io/* : v0.23.3 -> v0.24.3
  • sigs.k8s.io/controller-runtime v0.11.1 -> v0.12.1
  • sigs.k8s.io/controller-tools: 0.8.0 -> 0.9.0
• [OPERATOR] Updated builder image golang: v1.18.3 -> v1.18.5 (gardener/gardener-extension-shoot-cert-service#130, @MartinWeindel)
• [OPERATOR] doc user (gardener/gardener-extension-shoot-cert-service#127, @etiennnr)

[cert-management]

🏃 Others

• [OPERATOR] updated image builder to golang:v1.18.5 (gardener/cert-management#112, @MartinWeindel)
• [OPERATOR] minor dependencies updates (gardener/cert-management#112, @MartinWeindel)

v1.23.0

[gardener-extension-shoot-cert-service]

🏃 Others

• [OPERATOR] The extension now uses distroless instead of alpine as a base image. (gardener/gardener-extension-shoot-cert-service#121, @dimityrmirchev)
• [OPERATOR] Adjust metric name due to upgrading the kube-state-metrics component (gardener/gardener-extension-shoot-cert-service#122, @istvanballok)
• [OPERATOR] vendor to gardener/gardener v1.49.3 (gardener/gardener-extension-shoot-cert-service#124, @MartinWeindel)
• [OPERATOR] No predefined resources to allow to drop cpu limits. (gardener/gardener-extension-shoot-cert-service#125, @MartinWeindel)

[cert-management]

🏃 Others

• [OPERATOR] Update prometheus-client dependency to v1.12.2 (gardener/cert-management#107, @MartinWeindel)
• [OPERATOR] Update Kubernetes dependencies to v0.24.1 (gardener/cert-management#109, @MartinWeindel)
• [OPERATOR] Update base image to alpine:3.16.0 (gardener/cert-management#110, @MartinWeindel)
• [OPERATOR] The cert-controller-manager now uses distroless instead of alpine as a base image. (gardener/cert-management#111, @dimityrmirchev)

v1.22.0

[gardener-extension-shoot-cert-service]

🏃 Others

• [OPERATOR] Support issuer specific precheck nameservers for private ACME servers. (gardener/gardener-extension-shoot-cert-service#119, @MartinWeindel)
• [OPERATOR] A fixed memory limit was set for the shoot-cert-management-seed container, in accordance with measurements of actual field usage. CPU limit of same container was removed. (gardener/gardener-extension-shoot-cert-service#117, @andrerun)
• [OPERATOR] vendor to gardener/gardener v1.47.0 (gardener/gardener-extension-shoot-cert-service#116, @MartinWeindel)

[cert-management]

✨ New Features

• [USER] Allow to configure precheck nameservers per issuer. (gardener/cert-management#106, @MartinWeindel)
• [OPERATOR] Support delegated domains for DNS01 challenges (gardener/cert-management#101, @MartinWeindel)

🏃 Others

• [USER] Improved message for event on failed DNS challenge (gardener/cert-management#102, @MartinWeindel)
• [OPERATOR] Update golang image to v1.17.9 (gardener/cert-management#104, @MartinWeindel)
  • Update alpine image to v3.15.4
  • Update golang.org/x/crypto to v0.0.0-20220427172511-eb4f295cb31f

v1.21.0

[gardener-extension-shoot-cert-service]

⚠️ Breaking Changes

• [OPERATOR] This extension is only compatible with Gardener versions >= v1.37. (gardener/gardener-extension-shoot-cert-service#113, @rfranzke)

✨ New Features

• [OPERATOR] This extension is prepared to support the Shoot CA rotation feature (GEP-18). (gardener/gardener-extension-shoot-cert-service#113, @rfranzke)

🐛 Bug Fixes

• [OPERATOR] Add permissions to create events in control plane if issuer creation fails. (gardener/gardener-extension-shoot-cert-service#111, @MartinWeindel)

📖 Documentation

• [DEPENDENCY] Paths transformations in .docforge/manifest.yaml for simplification (gardener/gardener-extension-shoot-cert-service#112, @Kostov6)

🏃 Others

• [OPERATOR] Updated golang to 1.17.9, base image to alpine:3.15.3 (gardener/gardener-extension-shoot-cert-service#114, @MartinWeindel)