Skip to content

OSDOCS#14771: Updated cert-manager release note text for 1.16 #93727

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from
+22 −0
Closed

OSDOCS#14771: Updated cert-manager release note text for 1.16 #93727

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 22 additions & 0 deletions security/cert_manager_operator/cert-manager-operator-release-notes.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,28 @@ These release notes track the development of {cert-manager-operator}.

For more information, see xref:../../security/cert_manager_operator/index.adoc#cert-manager-operator-about[About the {cert-manager-operator}].

[id="cert-manager-operator-release-notes-1-16_{context}"]
== {cert-manager-operator} 1.16
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
== {cert-manager-operator} 1.16
== {cert-manager-operator} 1.16.0

please find other version refs if present too.


Issued: 2025-05-27

The following advisories are available for the {cert-manager-operator} 1.16:

* link:https://access.redhat.com/errata/RHBA-2025[RHEA-2025]

Version `1.16` of the {cert-manager-operator} is based on the upstream cert-manager version `v1.16.0`. For more information, see the link:https://cert-manager.io/docs/releases/release-notes/release-notes-1.16[cert-manager project release notes for v1.16].
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more. 

based on the upstream cert-manager version `v1.16.4`

and link it to: https://cert-manager.io/docs/releases/release-notes/release-notes-1.16/#v1164
like we did in all previous versions.


[id="cert-manager-operator-1-16-0-features-enhancements_{context}"]
=== New features and enhancements

*Disconnected installation support*
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lunarwhite would it be needful to mention that we tested on Private ACME?

I think the Issuer list table that we have.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Disconnected environment support

With this release, the cert-manager operator has been verified to install and function in disconnected clusters with the following issuer types: ACME, CA, Self-signed, and Vault. Specifically, private or self-hosted ACME servers have been validated, as Let's Encrypt or other public ACME services are not feasible options in air-gapped environments. To mirror operator images, the preferred method is using the oc-mirror plugin v2, for more infomation, please see: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/disconnected_environments/mirroring-in-disconnected-environments#about-installing-oc-mirror-v2


Starting with {cert-manager-operator} v1.16, the Operator can now be deployed in disconnected OpenShift clusters, enabling customers operating in disconnected environments to use {cert-manager-operator}.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Adding

Extended operand metrics support

With this release, cert-manager webhook and cainjector operands now expose Prometheus metrics on port 9402 by default via the /metrics service endpoint. You can configure OpenShift Monitoring to collect metrics from all cert-manager operands by enabling the built-in user workload monitoring stack. For more information, see <the link to the existing monitoring page>

For the doc section to modify/create, you could refer to https://github.com/openshift/cert-manager-operator/blob/52b0de67fc0fa8a3b3602ffa0785bd95b403585c/docs/operand_metrics.md

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it be helpful to mention the route feature GA-ed in OCP v4.19? (perhaps could do it in a separate followup PR, since it only applicable to 4.19+) Just like something we did for v1.13.0: #78572

cc @swghosh @chiragkyal

Adding something like #93202:

Securing routes with cert-manager managed certificates

...

And make changes to the corresponding section, similar to what we're doing in #92978

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SGTM. We just need to clarify that the feature is applicable for OCP 4.19+, and not actually mapped to cert-manager release.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let me create the follow up PR for the same.

[id="cert-manager-operator-1-16-CVEs_{context}"]
=== CVEs

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more. 

+ CVE-2025-22866
+  CVE-2024-45337 
+ CVE-2024-45338


[id="cert-manager-operator-release-notes-1-15-1_{context}"]
== {cert-manager-operator} 1.15.1

Expand Down