Venafi Enhanced Issuer releases¶

​ Learn about current and past releases of Venafi Enhanced Issuer. ​

Latest release¶

​ The latest stable version of Venafi Enhanced Issuer is v0.14.0.

Downloads¶

​Release 0.14.0¶

Venafi Enhanced Issuer 0.14.0 was released on May 17, 2024.

Key features¶

• This release updates Venafi Enhanced Issuer to use Venafi Connection 0.1.0. For more information, see the Venafi Connection 0.1.0 release notes.

​Release 0.13.3¶

Venafi Enhanced Issuer 0.13.3 was released on March 28, 2024.

Key features¶

• This release updates the Venafi connection version to 0.0.20.

• This release also corrects an issue in the Helm chart that incorrectly prevented the use of certain affinity and topologySpreadConstraints values.

​Release 0.13.2¶

Venafi Enhanced Issuer 0.13.2 was released on March 26, 2024.

Key features¶

• You can now configure an HTTP proxy from the Helm chart by using the following values: http_proxy, https_proxy, and no_proxy. For more information, see the Venafi Enhanced Issuer Helm values reference page.

​Release 0.13.1¶

Venafi Enhanced Issuer 0.13.1 was released on March 12, 2024.

Key features¶

• This patch release updates the version of Go used by Venafi Enhanced Issuer to v1.21.8. This update addresses the following four low-risk Go vulnerabilities: GO-2024-2609, GO-2024-2599, GO-2024-2598, and GO-2023-2382.

​Release 0.13.0¶

Venafi Enhanced Issuer 0.13.0 was released on March 11, 2024.

Key features¶

• You can now set your team’s mailing list email on your VenafiIssuers and VenafiClusterIssuers, as well as using an annotation on the certificate resources in Kubernetes, so that TLS Protect Datacenter warns you when the certificate fails to be renewed or is about to expire. For more information, see Configuring contacts when requesting certificates.
• The releases also renames the Venafi Enhanced Issuer API VenafiIssuer.spec.contact.emails and VenafiClusterIssuer.spec.contact.emails fields to VenafiIssuer.spec.contact.contact.tppIdentities and VenafiClusterIssuer.spec.contact.tppIdentities to improve the contact configuration functionality. The annotation venafi.cert-manager.io/contacts was renamed to venafi.com/tpp-contact-identities for the same reason. For more information, see the Venafi Enhanced Issuer API reference.
• In this release, you can also use the short names vi and vci with kubectl. For example, instead of kubectl get venafiissuer, you can type kubectl get vi.
• The CPU limit in the Helm chart was removed to follow cert-manager's best practices.

Release 0.12.0¶

​ Venafi Enhanced Issuer 0.12.0 was released on February 23, 2024.

Key features¶

• Venafi Enhanced Issuer was updated in this release to no longer require permission to revoke certificates, which corresponded to the scope certificate:manage,revoke. For Venafi Enhanced Issuer 0.12.0 and later the scope needs to be set to certificate:manage.

For more information, see service account scopes.

=== "US Region"

    - Container Image: `private-registry.venafi.cloud/venafi-issuer/venafi-enhanced-issuer:v0.12.0`
    - Helm Chart: `oci://registry.venafi.cloud/charts/venafi-enhanced-issuer:v0.12.0`
    - Helm Chart: `oci://private-registry.venafi.cloud/charts/venafi-enhanced-issuer:v0.12.0`

=== "EU Region"

    - Container Image: `private-registry.venafi.eu/venafi-issuer/venafi-enhanced-issuer:v0.12.0`
    - Helm Chart: `oci://registry.venafi.cloud/charts/venafi-enhanced-issuer:v0.12.0`
    - Helm Chart: `oci://private-registry.venafi.eu/charts/venafi-enhanced-issuer:v0.12.0`

Release 0.11.0¶

​ Venafi Enhanced Issuer 0.11.0 was released on November 29, 2023.

Key features¶

• A new metric venaficonnection_status is now available. This metric lets you monitor connection or authentication problems to the Venafi Control Plane API and TLS Protect Datacenter.
• The existing HTTP metrics now include the HTTP path and host. The host label holds the hostname of the TLS Protect Datacenter or TLS Protect Cloud instance, for example, tpp.example.com and api.venafi.cloud. The path label holds the HTTP path of the request. The UUID and names are stripped from the HTTP paths so that the metrics' cardinality doesn't explode.
• The field clientId in thehashicorpVaultOAuth block in the Venafi Connection custom resource is deprecated. This change should not affect existing users of Venafi Enhanced Issuer since this field was not effective.

=== "US Region"

    - Container Image: `private-registry.venafi.cloud/venafi-issuer/venafi-enhanced-issuer:v0.11.0`
    - Helm Chart: `oci://registry.venafi.cloud/charts/venafi-enhanced-issuer:v0.11.0`
    - Helm Chart: `oci://private-registry.venafi.cloud/charts/venafi-enhanced-issuer:v0.11.0`

=== "EU Region"

    - Container Image: `private-registry.venafi.eu/venafi-issuer/venafi-enhanced-issuer:v0.11.0`
    - Helm Chart: `oci://registry.venafi.cloud/charts/venafi-enhanced-issuer:v0.11.0`
    - Helm Chart: `oci://private-registry.venafi.eu/charts/venafi-enhanced-issuer:v0.11.0`

Release 0.10.1¶

​ Venafi Enhanced Issuer 0.10.1 was released on November 16, 2023.

Key features¶

• Fixed a bug in the metrics HTTP roundtripper.

Release 0.10.0¶

​ Venafi Enhanced Issuer 0.10.0 was released on October 27th, 2023.

Key features¶

• The Venafi Enhanced Issuer component exposes operational and usage telemetry metrics suitable for popular monitoring solutions, enabling alerts on important operational states. For more information, see Metrics for Venafi Enhanced Issuer.

• The Helm chart for the Venafi Enhanced Issuer has been improved and, nowPodDisruptionBudget is created by default. With Helm values, you can configure Pod nodeSelector, Pod affinity, and Pod tolerations. Additionally, you can leverage custom Topology Spread Constraints to adjust the deployment according to their specific requirements.

Related links¶

• Installing Venafi Enhanced Issuer
• Configuring Venafi Enhanced Issuer
• Metrics for Venafi Enhanced Issuer
• Venafi Enhanced Issuer API reference
• Venafi Enhanced Issuer image flags