v1.7.1

[gardener-extension-shoot-cert-service]

Improvements

• [OPERATOR] An issue preventing cert-controller-manager to acquire leadership is now fixed. (0c766e7)
• [OPERATOR] An issue causing shoot-cert-service to crash when the Extension spec.providerConfig=nil is now fixed. (624700e)

[cert-management]

Improvements

• [OPERATOR] bug fix for watches check on controller startup in the controller-manager-library (gardener/cert-management#34, @MartinWeindel)

v1.7.0

[gardener-extension-shoot-cert-service]

Improvements

• [USER] An issue has been fixed which caused certificates to not get ready if the TLS certificate was successfully issued before. (#25, @timuthy)
• [USER] validation: remove lastPendingTimestamp as required field in status (#22, @MartinWeindel)
• [OPERATOR] Required network policies for Cert-Management have been aligned with the latest changes from Gardener (gardener/gardener#2339). (#27, @timuthy)
• [OPERATOR] Adds issuer secrets as resources to extension status so they could be properly migrated (#24, @stoyanr)
• [OPERATOR] An issue preventing CRDs to be created on v1.11.x cluster is now fixed. (#20, @ialidzhikov)
• [OPERATOR] It is now possible to control whether the default issuer is restricted to the shoot domain (restrictIssuer=true default) or whether it can be used w/o a domain restriction (restrictIssuer=false). (#19, @timuthy)

[cert-management]

Improvements

• [USER] allow to set certificate secret reference without setting 'secretName' field (gardener/cert-management#30, @MartinWeindel)
• [USER] validate for duplicate domain names in certificate (gardener/cert-management#30, @MartinWeindel)
• [OPERATOR] Fix propagation of DNS entry on Alicloud DNS by setting default TTL to 60s (gardener/cert-management#33, @MartinWeindel)
• [OPERATOR] New command line option --propagation-timeout (gardener/cert-management#33, @MartinWeindel)
• [OPERATOR] allow to specify a quota for certificate requests per day (gardener/cert-management#30, @MartinWeindel)
• [OPERATOR] lease mechanism is activated for all controllers to allow running multiple instances (gardener/cert-management#30, @MartinWeindel)
• [OPERATOR] The commonName field of certificates is now subjected to a 64 characters limit. (gardener/cert-management#28, @timuthy)
• [OPERATOR] Validation for CRDs are added. (gardener/cert-management#26, @zanetworker)

[gardener]

Improvements

• [OPERATOR] Fixed a bug in the health check library that leads to too many health checks being executed when the Extension.Status changes. (gardener/gardener#2307, @danielfoehrKn)
• [OPERATOR] Fixed the health check condition.lastTransitionTime in the health check library. (gardener/gardener#2307, @danielfoehrKn)

v1.6.5

[gardener-extension-shoot-cert-service]

Improvements

• [OPERATOR] Required network policies for Cert-Management have been aligned with the latest changes from Gardener (gardener/gardener#2339). (98dc5b1)

v1.6.4

[gardener-extension-shoot-cert-service]

Improvements

• [USER] An issue has been fixed which caused certificates to not get ready if the TLS certificate was successfully issued before. (987e997)

v1.6.3

[gardener-extension-shoot-cert-service]

Improvements

• [USER] validation: remove lastPendingTimestamp as required field in status (#22, @MartinWeindel)

Docker Images

gardener-extension-shoot-cert-service: eu.gcr.io/gardener-project/gardener/extensions/shoot-cert-service:v1.6.3

v1.6.2

[gardener]

Improvements

• [OPERATOR] Fixed a bug in the health check library that leads to too many health checks being executed when the Extension.Status changes. (gardener/gardener#2307, @danielfoehrKn)
• [OPERATOR] Fixed the health check condition.lastTransitionTime in the health check library. (gardener/gardener#2307, @danielfoehrKn)

Docker Images

gardener-extension-shoot-cert-service: eu.gcr.io/gardener-project/gardener/extensions/shoot-cert-service:v1.6.2

v1.6.1

[gardener-extension-shoot-cert-service]

Improvements

• [OPERATOR] An issue preventing CRDs to be created on v1.11.x cluster is now fixed. (525c6d6)

Docker Images

gardener-extension-shoot-cert-service: eu.gcr.io/gardener-project/gardener/extensions/shoot-cert-service:v1.6.1

v1.6.0

[gardener-extension-shoot-cert-service]

Improvements

• [USER] Validation has been added for Certificate resources which help to prevent invalid specifications. (#14, @timuthy)
• [OPERATOR] Fixed a bug in the healthcheck library that prevents checks after a Shoot has been woken up from hibernation. Gardener extensions require a minor change during the healthcheck registration. (#17, @ialidzhikov)
• [OPERATOR] Golang version is updated to 1.14.2. (#15, @ialidzhikov)
• [OPERATOR] Validation has been added for Issuer resources which help to prevent invalid specifications. (#14, @timuthy)
• [OPERATOR] DNS entries for DNS challenges can now optionally be created in a namespace on the shoot instead of in the control plane namespace on the seed. (#11, @MartinWeindel)

[gardener]

Improvements

• [DEVELOPER] The ShootNotFailed predicate in the extensions library does now work as expected. (gardener/gardener#2265, @rfranzke)

Docker Images

gardener-extension-shoot-cert-service: eu.gcr.io/gardener-project/gardener/extensions/shoot-cert-service:v1.6.0

v1.5.0

[cert-management]

Improvements

• [OPERATOR] source controllers: ignore certificates for which it is not responsible (gardener/cert-management#24, @MartinWeindel)

v1.4.0

[gardener-extension-shoot-cert-service]

Improvements

• [OPERATOR] The health checks are no longer executed for shoots with disabled DNS. (#10, @rfranzke)

Docker Images

gardener-extension-shoot-cert-service: eu.gcr.io/gardener-project/gardener/extensions/shoot-cert-service:v1.4.0