Skip to content

Commit

Permalink
Added cert-manager operator 1.15 release note text.
Browse files Browse the repository at this point in the history
  • Loading branch information
subhtk committed Jan 21, 2025
1 parent 9ee3e76 commit ab72f2e
Showing 1 changed file with 45 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,51 @@ These release notes track the development of {cert-manager-operator}.

For more information, see xref:../../security/cert_manager_operator/index.adoc#cert-manager-operator-about[About the {cert-manager-operator}].

[id="cert-manager-operator-release-notes-1-15-0"]
== {cert-manager-operator} 1.15.0

Issued: 2025-01-22

Version `1.15.0` of the {cert-manager-operator} is based on the upstream cert-manager version `v1.15.4`. For more information, see the link:https://cert-manager.io/docs/releases/release-notes/release-notes-1.15/#v1154[cert-manager project release notes for v1.15.4].

=== New features and enhancements

*Scheduling Overrides for {cert-manager-operator}*

With this release, you can configure scheduling overrides for {cert-manager-operator}, including the cert-manager controller, webhook, and CA injector.

For more information, see xref:../../security/cert_manager_operator/cert-manager-customizing-api-fields.adoc#cert-manager-scheduling-overrides[Configuring Scheduling Overrides for {cert-manager-operator}].

*Google CAS issuer*

The {cert-manager-operator} now supports the Google Certificate Authority Service (CAS) issuer. The `google-cas-issuer` is an external issuer for cert-manager that automates certificate lifecycle management, including issuance and renewal, with CAS-managed private certificate authorities (CAs).

[NOTE]
====
The Google CAS issuer is validated only with version 0.9.0 and {cert-manager-operator} version 1.15.0. These versions support tasks such as issuing, renewing, and managing certificates for the API server and ingress controller in {product-title} clusters.
====

*Default installMode updated to AllNamespaces*

Starting from version 1.15.0, the default and recommended Operator Lifecycle Manager (OLM) installMode is AllNamespaces. Previously, the default was SingleNamespace. This change aligns with best practices for multi-namespace operator management.
For more information, see link:https://issues.redhat.com/browse/OCPBUGS-23406[OCPBUGS23406]

=== Removed features

The operator no longer includes the redundant `kube-rbac-proxy` sidecar container, reducing resource usage and complexity.
For more information, see link:https://issues.redhat.com/browse/CM-436[CM-436]

[id="cert-manager-operator-1-15-0-CVEs"]
=== CVEs

* link:https://access.redhat.com/security/cve/CVE-2024-35255[CVE-2024-35255]
* link:https://access.redhat.com/security/cve/CVE-2024-28180[CVE-2024-28180]
* link:https://access.redhat.com/security/cve/CVE-2024-24783[CVE-2024-24783]
* link:https://access.redhat.com/security/cve/CVE-2024-6104[CVE-2024-6104]
* link:https://access.redhat.com/security/cve/CVE-2023-45288[CVE-2023-45288]
* link:https://access.redhat.com/security/cve/CVE-2024-45337[CVE-2024-45337]
* link:https://access.redhat.com/security/cve/CVE-2024-45338[CVE-2024-45338]

[id="cert-manager-operator-release-notes-1-14-0"]
== {cert-manager-operator} 1.14.0

Expand Down

0 comments on commit ab72f2e

Please sign in to comment.