OpenShift Routes for cert-manager releases¶

OpenShift Routes provides OpenShift Route support for cert-manager. Learn about current and past releases of OpenShift Routes for cert-manager.

Latest OpenShift Routes for cert-manager release¶

The latest stable release of OpenShift Routes for cert-manager is v0.7.1.

Downloads¶

Release 0.7.1¶

OpenShift Routes 0.7.1 was released on 24 October 2024.

Key features¶

• This patch release fixes an issue where the renew-before annotation was being set on certificates with a value of zero.

• The following dependencies were updated in this release:

  • cert-manager was updated to v0.16.1
  • k8s.io/api was updated to v0.31.2
  • k8s.io/apimachinery was updated to v0.31.2
  • k8s.io/cli-runtime was updated to v0.31.2
  • k8s.io/client-go was updated to v0.31.2
  • k8s.io/component-base was updated to v0.31.2

Release 0.7.0¶

OpenShift Routes 0.7.0 was released on 3 October 2024.

Key features¶

• Issuing via Certificate Resources

  Previously, OpenShift Routes worked by creating cert-manager CertificateRequest resources based on the annotations added to OpenShift Route resources.

  To address issues this caused, OpenShift Routes will now create cert-manager Certificate resources instead, which dramatically simplifies the login in OpenShift Routes and provides several benefits:

  • Metrics are exposed by cert-manager for Certificate resources, improving observability.
  • Certificate resources are much more user friendly to read and understand.
  • Issued certificates are also stored in Kubernetes Secret resources, allowing use in your applications as well as on Routes.

  Read before upgrading

  Most users should be able to upgrade using Helm without seeing much difference in behaviour. Existing annotated Routes with certificates will continue to function as before. When reissuance is triggered, the Route should be updated using a Certificate with no user interaction.

  Given the nature of the change, however, it's advisable to check the state of issued certificates on your Route resources to be sure that they're being renewed. If you find any problems, please contact Venafi.

  It's important to note that:

  • You must upgrade properly. There are important RBAC changes which come with the upgrade. Without those changes, OpenShift Routes will fail to issue any certificate.
  • If you're using cert-manager's approval mechanism, the CertificateRequest resources will have different names to those they had before. The names now will be deterministic per-route.

• New annotations supported

  OpenShift Routes now supports more annotations on routes, allowing greater flexibility in issuing certificates:

  • cert-manager.io/private-key-algorithm now now supports Ed25519 keys.
  • cert-manager.io/private-key-rotation-policy allows specifying how private keys should be rotated. Set this to Always unless you've got a good reason not to.
  • cert-manager.io/revision-history-limit controls how many CertificateRequests should be preserved when Certificates are (re-)issued. Set this to a low number to reduce cluster clutter.

• Dependency updates

  The following dependencies were updated in this release:

  • k8s.io/api was updated to v0.31.1
  • k8s.io/apimachinery was updated to v0.31.1
  • k8s.io/cli-runtime was updated to v0.31.1
  • k8s.io/client-go was updated to v0.31.1
  • k8s.io/component-base was updated to v0.31.1

Bug fixes¶

• A logging issue was fixed where %s is presented.

Release 0.6.1¶

OpenShift Routes 0.6.1 was released on 12 September 2024.

Key features¶

• Helm chart updates A v-prefixed value is now used for appVersion in the Helm chart to match the controller's image tag. No user action is required.

• Dependency updates

  New fields, such as RouteHTTPHeaders, were added to Routes, which are affected by OpenShift Routes during synchronization and updates. Dependencies were updated to accommodate these changes.

  The following dependencies were updated in this release:

  • cert-manager was updated to v1.15.3
  • k8s.io/api was updated to 0.31.0
  • k8s.io/apimachinery was updated to v0.31.0
  • k8s.io/cli-runtime was updated to v0.31.0
  • k8s.io/client-go was updated to v0.31.0
  • sigs.k8s.io/controller-runtime was updated to 0.19.0

Release 0.6.0¶

OpenShift Routes 0.6.0 was released on 13 August 2024.

Key features¶

• New Helm fields

  You can now use the namespace field in values.yaml for configuring the destination namespace. This is useful in the context of Helm subcharts.

  A new omitHelmLabels field was also added so that users can generate static manifests without Helm-specific labels.

• Release process changes

  The project now relies on Makefile modules like the other projects under the cert-manager org. The changes are:

  The file static/cert-manager-openshift-routes.yaml is no longer present in the repository. You now have to template your own manifests, for example:

  oc apply -f <(helm template openshift-routes -n cert-manager oci://private-registry.venafi.eu/openshift-routes/cert-manager-openshift-routes --set omitHelmLabels=true --version 0.6.0)