documentai: Added advanced_ocr_options field in OcrConfig (45c70e3)
documentai: Added EvaluationReference to evaluation.proto (#7290) (4623db8)
documentai: Added field_mask field in DocumentOutputConfig.GcsOutputConfig in document_io.proto (2a0b1ae)
documentai: Added font_family to document.proto feat: added ImageQualityScores message to document.proto feat: added PropertyMetadata and EntityTypeMetadata to document_schema.proto (9c5d6c8)
documentai: Added TrainProcessorVersion, EvaluateProcessorVersion, GetEvaluation, and ListEvaluations v1beta3 APIs feat: added evaluation.proto feat: added document_schema field in ProcessorVersion processor.proto feat: added image_quality_scores field in Document.Page in document.proto feat: added font_family field in Document.Style in document.proto (ac0c5c2)
documentai: Exposed GetProcessorType to v1 (447afdd)
documentai: Exposed GetProcessorType to v1beta3 (447afdd)
documentai: Rewrite signatures in terms of new location (3c4b2b3)
documentai: Added advanced_ocr_options field in OcrConfig (45c70e3)
documentai: Added EvaluationReference to evaluation.proto (#7290) (4623db8)
documentai: Added field_mask field in DocumentOutputConfig.GcsOutputConfig in document_io.proto (2a0b1ae)
documentai: Added font_family to document.proto feat: added ImageQualityScores message to document.proto feat: added PropertyMetadata and EntityTypeMetadata to document_schema.proto (9c5d6c8)
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
cert-manager 1.15 promotes several features to beta, including GatewayAPI support (ExperimentalGatewayAPISupport), the ability to provide a subject in the Certificate that will be used literally in the CertificateSigningRequest (LiteralCertificateSubject) and the outputting of additional certificate formats (AdditionalCertificateOutputFormats).
[!NOTE]
The cmctl binary have been moved to https://github.com/cert-manager/cmctl/releases.
For the startupapicheck Job you should update references to point at quay.io/jetstack/cert-manager-startupapicheck
[!NOTE]
From this release, the Helm chart will no longer uninstall the CRDs when the chart is uninstalled. If you want the CRDs to be removed on uninstall use crds.keep=false when installing the Helm chart.
Equally thanks to everyone who provided feedback, helped users and raised issues on GitHub and Slack and joined our meetings!
Thanks also to the CNCF, which provides resources and support, and to the AWS open source team for being good community members and for their maintenance of the PrivateCA Issuer.
In addition, massive thanks to Venafi for contributing developer time and resources towards the continued maintenance of cert-manager projects.
Changes by Kind
Feature
GatewayAPI support has graduated to Beta. Add the --enable-gateway-api flag to enable the integration. (#6961, @ThatsMrTalbot)
Add support to specify a custom key alias in a JKS Keystore (#6807, @bwaldrep)
Add the ability to communicate with Vault via mTLS when strict client certificates is enabled at Vault server side (#6614, @rodrigorfk)
Added option to provide additional audiences in the service account auth section for vault (#6718, @andrey-dubnik)
Venafi Issuer now sends a cert-manager HTTP User-Agent header in all Venafi Rest API requests.
For example: cert-manager-certificaterequests-issuer-venafi/v1.15.0+(linux/amd64)+cert-manager/ef068a59008f6ed919b98a7177921ddc9e297200. (#6865, @wallrj)
Add hint to validation error message to help users of external issuers more easily fix the issue if they specify a Kind but forget the Group (#6913, @SgtCoDFish)
Add support for numeric OID types in LiteralSubject. Eg. "1.2.3.4=String Value" (#6775, @inteon)
Promote the LiteralCertificateSubject feature to Beta. (#7030, @inteon)
Promoted the AdditionalCertificateOutputFormats feature gate to Beta (enabled by default). (#6970, @erikgb)
The Helm chart now allows you to supply extraObjects; a list of yaml manifests which will helm will install and uninstall with the cert-manager manifests. (#6424, @gplessis)
Update the Route53 provider to support fetching credentials using AssumeRoleWithWebIdentity (#6878, @pwhitehead-splunk)
Helm can now add optional hostAliases to cert-manager Pod to allow the DNS self-check to pass in custom scenarios. (#6456, @Pionerd)
Added a new Ingress annotation for copying specific Ingress annotations to Certificate's secretTemplate (#6839, @mangeshhambarde)
Added option to define additional token audiences for the Vault Kubernetes auth (#6744, @andrey-dubnik)
Allow cert-manager.io/allow-direct-injection in annotations (#6801, @jkroepke)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the all group with 7 updates in the / directory:
1.16.1
1.17.0
1.14.5
1.15.0
2.18.0
2.19.0
1.18.2
1.19.0
0.30.1
0.30.2
0.30.1
0.30.2
0.18.2
0.18.4
Updates
cloud.google.com/go/security
from 1.16.1 to 1.17.0Release notes
Sourced from cloud.google.com/go/security's releases.
Changelog
Sourced from cloud.google.com/go/security's changelog.
... (truncated)
Commits
8de2b41
chore: release main (#10171)fb8b540
chore(workstations): promote to GA v1.0.0 (#10212)51d4ec8
chore(migrationcenter): promote to GA v1.0.0 (#10209)fc2fb6b
chore(netapp): promote to GA v1.0.0 (#10210)20b5793
chore(servicehealth): promote to GA v1.0.0 (#10211)5892409
chore(config): promote to GA v1.0.0 (#10208)d4da4a5
fix(bigtable): Retry on RST_STREAM error (#9673)606f925
chore(commerce): promote to GA v1.0.0 (#10206)0cf5665
chore: promote clients to GA (#10205)a696c18
chore: promote clients to GA (#10203)Updates
github.com/cert-manager/cert-manager
from 1.14.5 to 1.15.0Release notes
Sourced from github.com/cert-manager/cert-manager's releases.
... (truncated)
Commits
3403251
Merge pull request #7055 from cert-manager-bot/cherry-pick-7052-to-release-1.15b1ac915
Merge pull request #7054 from cert-manager-bot/cherry-pick-7049-to-release-1.15c392ea8
BUGFIX: correctly mount config files for componentsdfce6b9
if list of controllers only contains disabled controllers, implicitly enable ...dadd37d
run 'make generate-helm-docs'c92fb1c
add Helm options to extend auto-approval or disable itd3e8db7
Merge pull request #7050 from cert-manager/self-upgrade-release-1.158f475f6
BOT: run 'make upgrade-klone' and 'make generate'ebb5281
Merge pull request #7044 from inteon/fix_release_bug64676af
Merge pull request #7034 from cert-manager/self-upgrade-masterUpdates
github.com/onsi/ginkgo/v2
from 2.18.0 to 2.19.0Release notes
Sourced from github.com/onsi/ginkgo/v2's releases.
Changelog
Sourced from github.com/onsi/ginkgo/v2's changelog.
Commits
28fb5d6
v2.19.0e31f03a
fix another typo966a28c
Fix typos in label sets docscd231fd
Label sets allow for more expressive label filteringUpdates
github.com/spf13/viper
from 1.18.2 to 1.19.0Release notes
Sourced from github.com/spf13/viper's releases.
... (truncated)
Commits
b9733f0
build(deps): bump actions/checkout from 4.1.4 to 4.1.66ecc5c8
build(deps): bump cachix/install-nix-action from 26 to 27248c6fd
build(deps): bump github/codeql-action from 3.25.4 to 3.25.7abea773
Update references to bketelsen/cryptf17acb4
build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.18e285a5
build(deps): bump github/codeql-action from 3.25.2 to 3.25.44017620
build(deps): bump actions/setup-go from 5.0.0 to 5.0.1b67e814
build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.24a182c7
build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.245a0e12
build(deps): bump mheap/github-action-required-labelsUpdates
google.golang.org/api
from 0.177.0 to 0.181.0Release notes
Sourced from google.golang.org/api's releases.
... (truncated)
Changelog
Sourced from google.golang.org/api's changelog.
... (truncated)
Commits
4b79cc4
chore(main): release 0.181.0 (#2582)c3f4828
feat(all): auto-regenerate discovery clients (#2589)7d13175
chore: update min version to 1.20 (#2588)86c9521
feat(all): auto-regenerate discovery clients (#2587)afc4685
feat(all): auto-regenerate discovery clients (#2586)4177d21
chore(all): update all (#2584)e35f76f
feat(all): auto-regenerate discovery clients (#2585)7b18e5d
feat(all): auto-regenerate discovery clients (#2583)6923ec8
feat(all): auto-regenerate discovery clients (#2581)6feeaaf
chore(main): release 0.180.0 (#2579)Updates
google.golang.org/protobuf
from 1.34.0 to 1.34.1Updates
k8s.io/api
from 0.30.1 to 0.30.2Commits
118f81c
Update dependencies to v0.30.2 tagUpdates
k8s.io/apimachinery
from 0.30.1 to 0.30.2Commits
Updates
k8s.io/cli-runtime
from 0.30.1 to 0.30.2Commits
a93d336
Update dependencies to v0.30.2 tagUpdates
k8s.io/client-go
from 0.30.1 to 0.30.2Commits
592d891
Update dependencies to v0.30.2 tagUpdates
sigs.k8s.io/controller-runtime
from 0.18.2 to 0.18.4Release notes
Sourced from sigs.k8s.io/controller-runtime's releases.
Commits
12cc8d5
Merge pull request #2848 from k8s-infra-cherrypick-robot/cherry-pick-2847-to-...c0c229e
controllerutil: allow configuring BlockOwnerDeletion when setting OwnerRefere...be2f383
Merge pull request #2840 from sbueringer/pr-bump-k8s4720d17
Bump k8s.io/* to v0.30.1aa9ed14
Merge pull request #2837 from sbueringer/pr-setup-envtest-ct-rel-0.1835d7bbd
default --use-deprecated-gcs to truece4e4f5
some more deprecations56dcc14
setup-envtest: allow downloading envtest binaries from controller-toolsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show