cert-manager - v1.14.0-alpha.1

This is the second pre-release of cert-manager 1.14 which will be released on January 31 2024.

Breaking Changes

The startupapicheck job uses a new OCI image called "startupapicheck", instead of the ctl image.
If you run in an environment in which images cannot be pulled, be sure to include the new image.

The KeyUsage and BasicConstraints extensions will now be encoded as critical in the CertificateRequest's CSR blob.

Release Notes

📖 Read the draft cert-manager 1.14 release notes.

Community

Thanks again to all open-source contributors with commits in this release, including:
- @phillebaba
- @tberreis

Changes since v1.14.0-alpha.0

Feature

• Add TLS support to the metrics endpoint through either a certificate file or through dynamically issued certificates (#6574, @ThatsMrTalbot)
• Helm Chart: allow changing the default Deployment revisionHistoryLimit (#6248, @tberreis)
• Security: Limit the size of the response body read from HTTP requests by cert-manager. (#6619, @ThatsMrTalbot)

Bug or Regression

• BUGFIX: Ensure otherName SAN changes in Certificate resources trigger re-issuance. (#6620, @SpectralHiss)
• Bugfix: Publish the startupapicheck image to quay.io (#6609, @wallrj)

Other (Cleanup or Flake)

• cert-manager is now built with Go v1.21.6 (#6628, @SgtCoDFish)
• Update the Azure SDK and remove deprecated autorest dependency (#5452, @phillebaba)

Dependencies

Added

• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.9.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.4.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.5.1
• github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/dns/armdns: v1.2.0
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.1.1
• github.com/dnaeon/go-vcr: v1.2.0
• github.com/golang-jwt/jwt/v5: v5.0.0
• github.com/kylelemons/godebug: v1.1.0
• github.com/montanaflynn/stats: v0.7.0
• github.com/pkg/browser: 681adbf

Changed

Nothing has changed.

Removed

• github.com/Azure/azure-sdk-for-go: v68.0.0+incompatible
• github.com/Azure/go-autorest/autorest/adal: v0.9.23
• github.com/Azure/go-autorest/autorest/date: v0.3.0
• github.com/Azure/go-autorest/autorest/mocks: v0.4.2
• github.com/Azure/go-autorest/autorest/to: v0.4.0
• github.com/Azure/go-autorest/autorest/validation: v0.3.1
• github.com/Azure/go-autorest/autorest: v0.11.29
• github.com/Azure/go-autorest/logger: v0.2.1
• github.com/Azure/go-autorest/tracing: v0.6.0
• github.com/Azure/go-autorest: v14.2.0+incompatible