Bump certmanager to 1.11.1
What does this MR do?
Bumpt certmanager to 1.11.1. This bump implies several potentially breaking changes.
Pointers on where to find/handle these changes are included in the 7.0 release document.
Note: The releases deployed in CI do not use the bundled certmanager.
edit-in-place
is necessary
Why Certmanager 1.11.x is the latest stable release and currently not able to set the ingressClassName
of ACME ingresses. As a result, various Ingress controllers (including our bundled nginx controller) do not pick up the ACME Ingresses without additional configuration. To workaround this problem, the acme.cert-manager.io/http01-edit-in-place
annotation instructs certmanager to edit the existing ingresses instead of creating new ones.
More context: !3108 (comment 1359138611)
Related issues
Closes #4313 (closed)
Checklist
See Definition of done.
For anything in this list which will not be completed, please provide a reason in the MR discussion.
Test Plan
Fresh install
- Deploy the chart with certmanager 1.11.1 to an environment with an public IP (to allow ACME challenges to succeed)
- Verify certmanager was installed and TLS/SSL works as expected
Upgrade path
- Deploy a chart bundled with certmanager 1.5.4 (e.g. 5.10) to an environment with an public IP (to allow ACME challenges to succeed)
- Upgrade the chart to the state of this MR
- Verify certmanager was upgraded and TLS/SSL works as expected
- Verify certificate renew works as expected (e.g. by using
cmctl
or by setting arenewBefore
on the certificate resource)
Required
-
Merge Request Title and Description are up to date, accurate, and descriptive -
MR targeting the appropriate branch -
MR has a green pipeline on GitLab.com -
When ready for review, MR is labeled "~workflow::ready for review" per the Distribution MR workflow
Expected (please provide an explanation if not completing)
-
Test plan indicating conditions for success has been posted and passes -
Documentation created/updated -
Tests added -
Integration tests added to GitLab QA -
Equivalent MR/issue for omnibus-gitlab opened -
Validate potential values for new configuration settings. Formats such as integer10
, duration10s
, URIscheme://user:passwd@host:port
may require quotation or other special handling when rendered in a template and written to a configuration file.