Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OSDOCS 12343: Cert-manager release notes 1.15 #86686

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

subhtk
Copy link
Contributor

@subhtk subhtk commented Jan 3, 2025

Version(s):

Issue: https://issues.redhat.com/browse/OSDOCS-12343

Link to docs preview:

QE review:

  • QE has approved this change.

Additional information:

@openshift-ci openshift-ci bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Jan 3, 2025
@ocpdocs-previewbot
Copy link

ocpdocs-previewbot commented Jan 3, 2025

@subhtk
Copy link
Contributor Author

subhtk commented Jan 20, 2025

/test validate-portal

@subhtk
Copy link
Contributor Author

subhtk commented Jan 20, 2025

/retest

@openshift-ci openshift-ci bot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Jan 20, 2025
@openshift-ci openshift-ci bot added size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Jan 20, 2025
With this release, you can configure scheduling overrides for {cert-manager-operator}, including the controller, webhook, and CA injector.

For more information, see xref:../../security/cert_manager_operator/cert-manager-customizing-api-fields.adoc#cert-manager-scheduling-overrides[Configuring Scheduling Overrides for {cert-manager-operator}].

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add the following:

  1. https://issues.redhat.com/browse/CM-436: operator no longer uses the redundant kube-rbac-proxy sidecar container.
  2. https://issues.redhat.com/browse/OCPBUGS-23406: from 1.15.0 onwards the default and recommended operator OLM installMode is AllNamespaces (instead of the previously default SingleNamespace).

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please also add:

*Google CAS issuer*
The {cert-manager-operator} now supports the Google Certificate Authority Service (CAS) issuer. The `google-cas-issuer` is a cert-manager external issuer that automates the lifecycle management of certificates with CAS-managed private CAs.

[NOTE]
====
The Google CAS issuer is validated only with version 0.9.0 and the {cert-manager-operator} version 1.15.0. This version handles tasks such as issuance, renewal, and managing certificates for the API server and ingress controller of {product-title} clusters.
====

@subhtk
Copy link
Contributor Author

subhtk commented Jan 20, 2025

/test validate-portal

@subhtk
Copy link
Contributor Author

subhtk commented Jan 20, 2025

/retest-required

With this release, you can configure scheduling overrides for {cert-manager-operator}, including the controller, webhook, and CA injector.

For more information, see xref:../../security/cert_manager_operator/cert-manager-customizing-api-fields.adoc#cert-manager-scheduling-overrides[Configuring Scheduling Overrides for {cert-manager-operator}].

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please also add:

*Google CAS issuer*
The {cert-manager-operator} now supports the Google Certificate Authority Service (CAS) issuer. The `google-cas-issuer` is a cert-manager external issuer that automates the lifecycle management of certificates with CAS-managed private CAs.

[NOTE]
====
The Google CAS issuer is validated only with version 0.9.0 and the {cert-manager-operator} version 1.15.0. This version handles tasks such as issuance, renewal, and managing certificates for the API server and ingress controller of {product-title} clusters.
====

@subhtk
Copy link
Contributor Author

subhtk commented Jan 20, 2025

/test validate-portal

@openshift-ci openshift-ci bot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Jan 21, 2025
Copy link

openshift-ci bot commented Jan 21, 2025

@subhtk: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/validate-portal ab72f2e link true /test validate-portal

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
size/M Denotes a PR that changes 30-99 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants