Skip to content

[pull] master from cert-manager:master#1066

Open
pull[bot] wants to merge 3594 commits into
next-stack:masterfrom
cert-manager:master
Open

[pull] master from cert-manager:master#1066
pull[bot] wants to merge 3594 commits into
next-stack:masterfrom
cert-manager:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented Oct 28, 2022

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull Bot added the ⤵️ pull label Oct 28, 2022
cert-manager-bot and others added 29 commits February 27, 2026 15:19
Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
[CI] Merge self-upgrade-master into master
Somehow, Renovate didn't create a PR for this one.

Signed-off-by: Maël Valais <mael@vls.dev>
Fix GO-2026-4559 by upgrade to golang.org/x/net@v0.51.0
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
Signed-off-by: hjoshi123 <mail@hjoshi.me>
Signed-off-by: Hemant Joshi <mail@hjoshi.me>
Signed-off-by: hjoshi123 <mail@hjoshi.me>
Signed-off-by: Hemant Joshi <mail@hjoshi.me>
godoc.org has been deprecated and returns a 301 redirect to
pkg.go.dev. Update the badge link and image to use pkg.go.dev
directly.

Signed-off-by: Artem Luzhetskyi <artluzhetskyi@gmail.com>
Signed-off-by: Artem Muterko <artem@sopho.tech>
Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
Add a new optional Helm value `startupapicheck.ttlSecondsAfterFinished`
that, when set, configures the Kubernetes TTL controller to automatically
clean up the startupapicheck Job after it completes.

The field is intentionally disabled by default (commented out in
values.yaml) to preserve backward compatibility and avoid issues with
GitOps tools such as Argo CD that may attempt to reconcile or recreate
Jobs after they are garbage-collected by the TTL controller.

Users who want automatic Job cleanup can opt in by setting:

  startupapicheck:
    ttlSecondsAfterFinished: 600

Fixes #8363

Signed-off-by: dap0am <dapsaminu12@gmail.com>
…-pkgdev

Update Go documentation badge from godoc.org to pkg.go.dev
[CI] Merge self-upgrade-master into master
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…b-actions

chore(deps): update github/codeql-action action to v4.32.5 (master)
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…-go-deps

fix(deps): update module sigs.k8s.io/controller-runtime to v0.23.3 (master)
…licates

Signed-off-by: Adam Talbot <adamtalbot93@googlemail.com>
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
Signed-off-by: Hemant Joshi <mail@hjoshi.me>
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
Signed-off-by: Adam Talbot <adamtalbot93@googlemail.com>
Signed-off-by: cert-manager-bot <bot@cert-manager.io>

Co-authored-by: ThatsMrTalbot <15379715+ThatsMrTalbot@users.noreply.github.com>
…-merging-to-stable

cainjector: promote CAInjectorMerging feature gate to GA
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…x-deps

fix(deps): update golang.org/x deps (master)
hjoshi123 and others added 30 commits May 8, 2026 16:38
* adding helm unit tests for controller

Signed-off-by: hjoshi123 <mail@hjoshi.me>

* adding helm unit tests

Signed-off-by: hjoshi123 <mail@hjoshi.me>
Signed-off-by: Hemant Joshi <mail@hjoshi.me>

---------

Signed-off-by: hjoshi123 <mail@hjoshi.me>
Signed-off-by: Hemant Joshi <mail@hjoshi.me>
Make cainjector use SSA unconditionally
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…x-deps

fix(deps): update module golang.org/x/crypto to v0.51.0 (master)
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
Signed-off-by: Hemant Joshi <mail@hjoshi.me>
…b-actions

chore(deps): update github/codeql-action action to v4.35.4 (master)
It seems this had no effect: kubernetes/gengo#209

Signed-off-by: Ashley Davis <ashley.davis@cyberark.com>
fix(deps): update module github.com/venafi/vcert/v5 to v5.13.2 (master)
This brings in a tonne of changes to codegen which come with
the upgraded versions of the codegen tools

This is being done along with the bounding-dirs flag
removal because they come together

Signed-off-by: Ashley Davis <ashley.davis@cyberark.com>
```text
pkg/controller/util.go:217:62: inline: Constant reflect.Ptr should be inlined (govet)
	if v := reflect.ValueOf(arg); !v.IsValid() || ((v.Kind() == reflect.Ptr ||
```

Signed-off-by: Ashley Davis <ashley.davis@cyberark.com>
Delete now-removed bounding dirs flag && make upgrade
Prevent global solver extra labels from overwriting ACME identity labels
(acme.cert-manager.io/http-domain, acme.cert-manager.io/http-token,
acme.cert-manager.io/http01-solver) on dynamically-created HTTP01 solver
resources. A filterACMEIdentityLabels helper strips these protected keys
before merging. Without this guard, extra labels could silently break
resource discovery.

Signed-off-by: Yuedong Wu <dwcn22@outlook.com>
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…-go-deps

fix(deps): update module sigs.k8s.io/controller-runtime to v0.24.1 (master)
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
…-go-patches

fix(deps): update kubernetes go patches to v0.36.1 (master)
Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
[CI] Merge self-upgrade-master into master
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
feat: Add `--acme-http01-solver-extra-labels` for propagating custom labels to ACME HTTP01 solver resources
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
fix(deps): update module github.com/digitalocean/godo to v1.191.0 (master)
* acmechallenges: retry on transient ACME errors

Treat context.Canceled, context.DeadlineExceeded, and any net.Error
as transient when evaluating ACME challenge sync errors, so the
controller requeues instead of marking the challenge failed.

Fixes #8747

Signed-off-by: texasich <texasich@users.noreply.github.com>

* test: cover transient ACME challenge errors

Signed-off-by: Zhanybek Mamataliev <rogma07k@gmail.com>

---------

Signed-off-by: texasich <texasich@users.noreply.github.com>
Signed-off-by: Zhanybek Mamataliev <rogma07k@gmail.com>
Co-authored-by: texasich <texasich@users.noreply.github.com>
Co-authored-by: Zhanybek Mamataliev <rogma07k@gmail.com>
Signed-off-by: cert-manager-bot <cert-manager-bot@users.noreply.github.com>
[CI] Merge self-upgrade-master into master
* disabling client-go qps if AP&F is enabled

Signed-off-by: Hemant Joshi <mail@hjoshi.me>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Hemant Joshi <mail2hemantjoshi@pm.me>

---------

Signed-off-by: Hemant Joshi <mail@hjoshi.me>
Signed-off-by: Hemant Joshi <mail2hemantjoshi@pm.me>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.