Update Helm chart trust-manager to v0.13.0

[renovate]

This PR contains the following updates:

Package	Update	Change
trust-manager (source)	minor	v0.11.1 -> v0.13.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

cert-manager/trust-manager (trust-manager)

v0.13.0

Compare Source

trust-manager is the easiest way to manage security-critical TLS trust bundles in Kubernetes and OpenShift clusters.

v0.13.0 is a minor release to include a swathe of dependency updates, refactors and a few new features.

Among the new features is the new optional includeAllKeys field for Secret and ConfigMap sources, by @​juliocamarero. Previously, these sources required users to specify an indvidual key to include in the resulting bundle. With this new field, you can request that all keys be included instead. Note that Secret sources of kubernetes.io/tls type are not eligible for use with includeAllKeys, to avoid trust-manager reading a private key.

In addition, @​arsenalzp landed a great PR which cleans up handling of certificates within trust-manager, reducing the number of encode/decode operations done during a bundle reconcile.

What's Changed

• Support for including all certificates from a secret/configMap in bundle source by @​juliocamarero in https://github.com/cert-manager/trust-manager/pull/460
• Introduce certificate pool structure and remove multiple encode/decode process by @​arsenalzp in https://github.com/cert-manager/trust-manager/pull/375
• Fix example of topologySpreadConstraints to reference trust-manager by @​SgtCoDFish in https://github.com/cert-manager/trust-manager/pull/401
• Bump sigs.k8s.io/controller-runtime to 0.19.0 by @​erikgb in https://github.com/cert-manager/trust-manager/pull/414
• fix: don't error if source selector selects no sources by @​erikgb in https://github.com/cert-manager/trust-manager/pull/432
• ci: fix new copyloopvar lint errors by @​erikgb in https://github.com/cert-manager/trust-manager/pull/445
• test: add tests for truststore deterministic by @​erikgb in https://github.com/cert-manager/trust-manager/pull/443

Refactoring

• refactor: move FieldManager to more available package by @​erikgb in https://github.com/cert-manager/trust-manager/pull/397
• refactor: fix name and import alias collisions by @​erikgb in https://github.com/cert-manager/trust-manager/pull/412
• refactor: dedicated target data struct by @​erikgb in https://github.com/cert-manager/trust-manager/pull/415
• refactor: move function for creating managed field entries by @​erikgb in https://github.com/cert-manager/trust-manager/pull/413
• refactor: use NamespacedName instead of positional name/namespace by @​erikgb in https://github.com/cert-manager/trust-manager/pull/435
• refactor: reduce duplication in sync target functions by @​erikgb in https://github.com/cert-manager/trust-manager/pull/436
• refactor: establish target.Reconciler by @​erikgb in https://github.com/cert-manager/trust-manager/pull/378

Automated Dependency Bumps

• Bump the all group across 1 directory with 2 updates by @​dependabot in https://github.com/cert-manager/trust-manager/pull/404
• Bump the all group with 2 updates by @​dependabot in https://github.com/cert-manager/trust-manager/pull/398
• Bump k8s.io/cli-runtime from 0.30.3 to 0.31.0 in the all group across 1 directory by @​dependabot in https://github.com/cert-manager/trust-manager/pull/417
• Bump the all group across 1 directory with 3 updates by @​dependabot in https://github.com/cert-manager/trust-manager/pull/429
• build(deps): Bump sigs.k8s.io/controller-runtime from 0.19.0 to 0.19.1 in the all group by @​dependabot in https://github.com/cert-manager/trust-manager/pull/463
• Bump the all group with 5 updates by @​dependabot in https://github.com/cert-manager/trust-manager/pull/438
• build(deps): Bump the all group with 5 updates by @​dependabot in https://github.com/cert-manager/trust-manager/pull/461

Automated Makefile Modules Updates

• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/400
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/402
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/405
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/410
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/416
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/418
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/422
• [CI] Self-upgrade merging self-upgrade-main into main by @​inteon in https://github.com/cert-manager/trust-manager/pull/423
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/427
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/430
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/431
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/437
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/439
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/441
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/444
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/446
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/448
• [CI] Self-upgrade merging self-upgrade-main into main by @​inteon in https://github.com/cert-manager/trust-manager/pull/450
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/451
• [CI] Self-upgrade merging self-upgrade-main into main by @​inteon in https://github.com/cert-manager/trust-manager/pull/456
• [CI] Merge self-upgrade-main into main by @​github-actions in https://github.com/cert-manager/trust-manager/pull/462

New Contributors

• @​juliocamarero made their first contribution in https://github.com/cert-manager/trust-manager/pull/460 🎉

Full Changelog: cert-manager/trust-manager@v0.12.0...v0.13.0

v0.12.0

Compare Source

trust-manager is the easiest way to manage security-critical TLS trust bundles in Kubernetes and OpenShift clusters.

v0.12.0 includes a variety of Helm chart improvements, notably including the ability to install trust-manager without having first installed cert-manager!

Overview

Standalone trust-manager

Previously, trust-manager required that cert-manager was installed for generating the trust-manager webhook certificate. cert-manager's cainjector was used to inject this webhook cert into the Kubernetes webhook resource.

Some users wanted to be able to install trust-manager standalone, and now this is possible thanks to Helm's inbuilt support for generating certificates. We'd like to note that relying on Helm for this functionality isn't likely to be the best way to run in production - we'd strongly suggest that running with cert-manager is the way to go, since that will handle cert rotation and be much easier to administer.

Still, for any user who wants to simply run trust-manager, that's now possible:

helm upgrade trust-manager jetstack/trust-manager \
  --install \
  --namespace cert-manager \
  --wait \
  --set app.webhook.tls.helmCert.enabled=true

Other Helm Improvements

There are even more improvements to the Helm chart:

1. Support for configuring a dual stack service for the webhook (Thanks @​M0NsTeRRR!)
2. More configurability of trust-manager's leader-election including duration and deadline (Thanks @​jabdoa2!)

What's Changed

New Features

• Add support for generating certificates with helm by @​SgtCoDFish in https://github.com/cert-manager/trust-manager/pull/157
• feat(helm): dual-stack cluster service configuration by @​M0NsTeRRR in https://github.com/cert-manager/trust-manager/pull/337
• Add flags to configure LeaseDuration and RenewDeadline by @​jabdoa2 in https://github.com/cert-manager/trust-manager/pull/385
• Expose leader election leaseDuration and renewDeadline in helm chart by @​jabdoa2 in https://github.com/cert-manager/trust-manager/pull/388

Refactors

• refactor: simplify SSA patch calls by @​erikgb in https://github.com/cert-manager/trust-manager/pull/393
• refactor: move default truststore passwords to API by @​erikgb in https://github.com/cert-manager/trust-manager/pull/394
• refactor: extract truststore encoding to internal package by @​erikgb in https://github.com/cert-manager/trust-manager/pull/396

New Contributors

• @​M0NsTeRRR made their first contribution in https://github.com/cert-manager/trust-manager/pull/337

Full Changelog: cert-manager/trust-manager@v0.11.1...v0.12.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bloopy-boi]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ COPYPASTE	jscpd	yes		no	1.05s
✅ YAML	prettier	1	0	0	0.48s
✅ YAML	yamllint	1		0	0.25s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by