Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(helm/cert-manager): update v1.14.4 ➼ v1.14.7 #803

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

tinfoild[bot]
Copy link
Contributor

@tinfoild tinfoild bot commented Apr 25, 2024

This PR contains the following updates:

Package Update Change OpenSSF
cert-manager (source) patch v1.14.4 -> v1.14.7 OpenSSF Scorecard

Release Notes

cert-manager/cert-manager (cert-manager)

v1.14.7

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

📜 Changes since v1.14.6

Bugfixes
Other (Cleanup or Flake)

v1.14.6

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

📜 Changes since v1.14.5

Other (Cleanup or Flake)

v1.14.5

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.14.5 fixes a bug in the DigitalOcean DNS-01 provider which could cause incorrect DNS records to be deleted when using a domain with a CNAME. Special thanks to @​BobyMCbobs for reporting this issue and testing the fix!

It also patches CVE-2023-45288.

📜 Changes since v1.14.4

  • ACME Issuer (Let's Encrypt): wrong certificate chain may be used if preferredChain is configured: see 1.14 release notes for more information.

Changes

Bug or Regression

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Copy link

cloudflare-workers-and-pages bot commented Apr 25, 2024

Deploying jjgadgets-biohazard with  Cloudflare Pages  Cloudflare Pages

Latest commit: 7fb824c
Status: ✅  Deploy successful!
Preview URL: https://9ff62451.jjgadgets-biohazard.pages.dev
Branch Preview URL: https://renovate-cert-manager-1-14-x.jjgadgets-biohazard.pages.dev

View logs

@tinfoild
Copy link
Contributor Author

tinfoild bot commented Apr 25, 2024

--- HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-cainjector

+++ HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-cainjector

@@ -31,13 +31,13 @@

       securityContext:
         runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: cert-manager-cainjector
-        image: quay.io/jetstack/cert-manager-cainjector:v1.14.4
+        image: quay.io/jetstack/cert-manager-cainjector:v1.14.7
         imagePullPolicy: IfNotPresent
         args:
         - --v=2
         - --leader-election-namespace=kube-system
         env:
         - name: POD_NAMESPACE
--- HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager

+++ HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager

@@ -31,19 +31,19 @@

       securityContext:
         runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: cert-manager-controller
-        image: quay.io/jetstack/cert-manager-controller:v1.14.4
+        image: quay.io/jetstack/cert-manager-controller:v1.14.7
         imagePullPolicy: IfNotPresent
         args:
         - --v=2
         - --cluster-resource-namespace=$(POD_NAMESPACE)
         - --leader-election-namespace=kube-system
-        - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.14.4
+        - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.14.7
         - --dns01-recursive-nameservers="https://cloudflare-dns.com/dns-query","https://one.one.one.one/dns-query","https://1.1.1.1:443/dns-query","https://1.0.0.1:443/dns-query","https://security.cloudflare-dns.com/dns-query","https://1.1.1.2:443/dns-query","https://1.0.0.2:443/dns-query","https://family.cloudflare-dns.com/dns-query","https://1.1.1.3:443/dns-query","https://1.0.0.3:443/dns-query"
         - --dns01-recursive-nameservers-only
         - --feature-gates=AdditionalCertificateOutputFormats=true
         - --max-concurrent-challenges=60
         ports:
         - containerPort: 9402
--- HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-webhook

+++ HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-webhook

@@ -31,13 +31,13 @@

       securityContext:
         runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: cert-manager-webhook
-        image: quay.io/jetstack/cert-manager-webhook:v1.14.4
+        image: quay.io/jetstack/cert-manager-webhook:v1.14.7
         imagePullPolicy: IfNotPresent
         args:
         - --v=2
         - --secure-port=10250
         - --dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)
         - --dynamic-serving-ca-secret-name=cert-manager-webhook-ca
--- HelmRelease: cert-manager/cert-manager Job: cert-manager/cert-manager-startupapicheck

+++ HelmRelease: cert-manager/cert-manager Job: cert-manager/cert-manager-startupapicheck

@@ -31,13 +31,13 @@

       securityContext:
         runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: cert-manager-startupapicheck
-        image: quay.io/jetstack/cert-manager-startupapicheck:v1.14.4
+        image: quay.io/jetstack/cert-manager-startupapicheck:v1.14.7
         imagePullPolicy: IfNotPresent
         args:
         - check
         - api
         - --wait=1m
         - -v

@tinfoild
Copy link
Contributor Author

tinfoild bot commented Apr 25, 2024

--- kube/deploy/core/tls/cert-manager/app Kustomization: flux-system/1-core-tls-cert-manager-app HelmRelease: cert-manager/cert-manager

+++ kube/deploy/core/tls/cert-manager/app Kustomization: flux-system/1-core-tls-cert-manager-app HelmRelease: cert-manager/cert-manager

@@ -12,13 +12,13 @@

     spec:
       chart: cert-manager
       sourceRef:
         kind: HelmRepository
         name: jetstack
         namespace: flux-system
-      version: v1.14.4
+      version: v1.14.7
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:

@JJGadgets JJGadgets force-pushed the main branch 4 times, most recently from 12a15a8 to 7d82757 Compare April 28, 2024 21:04
@tinfoild tinfoild bot changed the title fix(helm): update chart cert-manager to v1.14.5 fix(helm): update chart cert-manager to v1.14.5 - autoclosed May 24, 2024
@tinfoild tinfoild bot closed this May 24, 2024
@tinfoild tinfoild bot deleted the renovate/cert-manager-1.14.x branch May 24, 2024 07:28
@tinfoild tinfoild bot changed the title fix(helm): update chart cert-manager to v1.14.5 - autoclosed fix(helm): update chart cert-manager to v1.14.5 May 24, 2024
@tinfoild tinfoild bot reopened this May 24, 2024
@tinfoild tinfoild bot restored the renovate/cert-manager-1.14.x branch May 24, 2024 07:34
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch from bc5474d to cf27388 Compare May 24, 2024 07:34
@JJGadgets JJGadgets force-pushed the main branch 2 times, most recently from a98348d to 74b5ce6 Compare May 27, 2024 02:31
@tinfoild tinfoild bot changed the title fix(helm): update chart cert-manager to v1.14.5 fix(helm): update chart cert-manager to v1.14.6 Jun 7, 2024
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch from cf27388 to 223c788 Compare June 7, 2024 13:44
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch 3 times, most recently from f8aa7c4 to 2bbef69 Compare June 21, 2024 09:56
@tinfoild tinfoild bot changed the title fix(helm): update chart cert-manager to v1.14.6 fix(helm): update chart cert-manager to v1.14.7 Jun 21, 2024
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch 2 times, most recently from f31c867 to e90a429 Compare June 24, 2024 16:21
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch 3 times, most recently from b37369d to 19549fc Compare July 8, 2024 17:58
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch 4 times, most recently from f004258 to e9317c4 Compare October 1, 2024 13:39
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch from e9317c4 to 7bd892a Compare October 22, 2024 04:46
@tinfoild tinfoild bot changed the title fix(helm): update chart cert-manager to v1.14.7 fix(helm): update chart cert-manager to v1.14.7 - autoclosed Nov 16, 2024
@tinfoild tinfoild bot closed this Nov 16, 2024
@tinfoild tinfoild bot deleted the renovate/cert-manager-1.14.x branch November 16, 2024 10:00
@tinfoild tinfoild bot changed the title fix(helm): update chart cert-manager to v1.14.7 - autoclosed fix(helm): update chart cert-manager to v1.14.7 Nov 16, 2024
@tinfoild tinfoild bot reopened this Nov 16, 2024
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch 2 times, most recently from 7bd892a to 053da75 Compare November 16, 2024 10:05
@tinfoild tinfoild bot changed the title fix(helm): update chart cert-manager to v1.14.7 fix(helm/cert-manager): update helm release cert-manager ➼ v1.14.7 Dec 4, 2024
@tinfoild tinfoild bot changed the title fix(helm/cert-manager): update helm release cert-manager ➼ v1.14.7 fix(helm/cert-manager): update ➼ v1.14.7 Dec 4, 2024
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch from 7bd892a to 00c39e4 Compare December 4, 2024 11:38
@tinfoild tinfoild bot changed the title fix(helm/cert-manager): update ➼ v1.14.7 fix(helm/cert-manager): update v1.14.4 ➼ v1.14.7 Dec 4, 2024
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch 4 times, most recently from 4f769c9 to 12de564 Compare December 6, 2024 02:21
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch from 12de564 to 7fb824c Compare December 6, 2024 15:39
@tinfoild tinfoild bot changed the title fix(helm/cert-manager): update v1.14.4 ➼ v1.14.7 fix(helm/cert-manager): update v1.14.4 ➼ v1.14.7 - autoclosed Dec 16, 2024
@tinfoild tinfoild bot closed this Dec 16, 2024
@tinfoild tinfoild bot changed the title fix(helm/cert-manager): update v1.14.4 ➼ v1.14.7 - autoclosed fix(helm/cert-manager): update v1.14.4 ➼ v1.14.7 Dec 16, 2024
@tinfoild tinfoild bot reopened this Dec 16, 2024
@tinfoild tinfoild bot force-pushed the renovate/cert-manager-1.14.x branch from 9fbdb5f to 7fb824c Compare December 16, 2024 05:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants