Update cert-manager from 1.17.4 to 1.19.4

Clemens Beckrequested to merge
cb-update-certmanager into master

What does this MR do?

Update cert-manager from 1.17.4 to 1.19.4

Update cert-manager to a supported version. Also changes to pull cert-manager from the OCI registry, which is the recommended way to pull/install the cert-manager chart.

Changelog: changed

Background

Certmanager 1.17 is EOL and does not match our supported K8s releases. By updating to 1.19 we jump to the latest supported version and align with our supported K8s releases.

⚠️ The upgrade has small potentially breaking changes (1, 2 which are not expected to break common usage with GitLab. Such small breaking changes caused by third-party dependencies is covered by the dependency statement in our breaking change policy: https://docs.gitlab.com/update/terminology/#third-party-dependencies.

Related issues

Relates Certmanager failing to issue multiple certifica... (#6257)

Test Plan

  1. Install GitLab with certmanager 1.17
  2. Confirm certificates are issued as expected
  3. Upgrade to GitLab with certmanager 1.19
  4. Confirm TLS continues to work
  5. Trigger a Certificate renew (cmctl renew --namespace gitlab --all)
  6. Confirms certicates have been renewed and continue to work

Author checklist

For general guidance, please follow our Contributing guide.

Required

For anything in this list which will not be completed, please provide a reason in the MR discussion.

  • Merge Request Title and Description are up to date, accurate, and descriptive.
  • MR targeting the appropriate branch.
  • MR has a green pipeline.
  • Documentation created/updated.
  • Tests added/updated, and test plan for scenarios not covered by automated tests.
  • Equivalent MR/issue for omnibus-gitlab opened.

Reviewers checklist

Edited by João Alexandre Cunha

Merge request reports