release 1.14.2: update release notes, upgrade notes and latest version

Signed-off-by: Tim Ramlot <[email protected]>
cert-manager · Feb 8, 2024 · 2441bdf · 2441bdf
1 parent dbdf6e1
commit 2441bdf
Show file tree

Hide file tree

Showing 8 changed files with 32 additions and 15 deletions.
diff --git a/content/docs/installation/README.md b/content/docs/installation/README.md
@@ -12,7 +12,7 @@ Learn about the various ways you can install cert-manager and how to choose betw
 The default static configuration can be installed as follows:
 
 ```bash
-kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.14.1/cert-manager.yaml
+kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.14.2/cert-manager.yaml
 ```
 
 📖 Read more about [installing cert-manager using kubectl apply and static manifests](./kubectl.md).

diff --git a/content/docs/installation/code-signing.md b/content/docs/installation/code-signing.md
@@ -19,7 +19,7 @@ key.
 For all cert-manager versions from `v1.8.0` and later, cert-manager container images are signed and verifiable using [`cosign`](https://docs.sigstore.dev/cosign/overview).
 
 ```console
-IMAGE_TAG=v1.14.1  # change as needed
+IMAGE_TAG=v1.14.2  # change as needed
 KEY=https://cert-manager.io/public-keys/cert-manager-pubkey-2021-09-20.pem
 cosign verify --signature-digest-algorithm sha512 --insecure-ignore-tlog --key $KEY quay.io/jetstack/cert-manager-acmesolver:$IMAGE_TAG
 cosign verify --signature-digest-algorithm sha512 --insecure-ignore-tlog --key $KEY quay.io/jetstack/cert-manager-cainjector:$IMAGE_TAG

diff --git a/content/docs/installation/helm.md b/content/docs/installation/helm.md
@@ -47,7 +47,7 @@ section below for details on each method.
 > Recommended for production installations
 
 ```bash
-kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.14.1/cert-manager.crds.yaml
+kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.14.2/cert-manager.crds.yaml
 ```
 
 ##### Option 2: install CRDs as part of the Helm release
@@ -70,7 +70,7 @@ helm install \
   cert-manager jetstack/cert-manager \
   --namespace cert-manager \
   --create-namespace \
-  --version v1.14.1 \
+  --version v1.14.2 \
   # --set installCRDs=true
 ```
 
@@ -83,7 +83,7 @@ helm install \
   cert-manager jetstack/cert-manager \
   --namespace cert-manager \
   --create-namespace \
-  --version v1.14.1 \
+  --version v1.14.2 \
   # --set installCRDs=true
   --set prometheus.enabled=false \  # Example: disabling prometheus using a Helm parameter
   --set webhook.timeoutSeconds=4   # Example: changing the webhook timeout using a Helm parameter
@@ -114,7 +114,7 @@ version: 0.1.0
 appVersion: "0.1.0"
 dependencies:
   - name: cert-manager
-    version: v1.14.1
+    version: v1.14.2
     repository: https://charts.jetstack.io
     alias: cert-manager
     condition: cert-manager.enabled
@@ -148,7 +148,7 @@ helm template \
   cert-manager jetstack/cert-manager \
   --namespace cert-manager \
   --create-namespace \
-  --version v1.14.1 \
+  --version v1.14.2 \
   # --set prometheus.enabled=false \   # Example: disabling prometheus using a Helm parameter
   # --set installCRDs=true \           # Uncomment to also template CRDs
   > cert-manager.custom.yaml

diff --git a/content/docs/installation/kubectl.md b/content/docs/installation/kubectl.md
@@ -21,7 +21,7 @@ are included in a single YAML manifest file:
 Install all cert-manager components:
 
 ```bash
-kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.14.1/cert-manager.yaml
+kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.14.2/cert-manager.yaml
 ```
 
 By default, cert-manager will be installed into the `cert-manager`

diff --git a/content/docs/installation/operator-lifecycle-manager.md b/content/docs/installation/operator-lifecycle-manager.md
@@ -218,7 +218,7 @@ The following JSON patch will append `-v=6` to command line arguments of the cer
 (the first container of the first Deployment).
 
 ```bash
-kubectl patch csv cert-manager.v1.14.1 \
+kubectl patch csv cert-manager.v1.14.2 \
   --type json \
   -p '[{"op": "add", "path": "/spec/install/spec/deployments/0/spec/template/spec/containers/0/args/-", "value": "-v=6" }]'
 ```

diff --git a/content/docs/releases/release-notes/release-notes-1.14.md b/content/docs/releases/release-notes/release-notes-1.14.md
@@ -14,12 +14,25 @@ support for creating [CA certificates with "Name Constraints" and "Authority Inf
 >
 > Read [The cert-manager Command Line Tool (cmctl) page](../../reference/cmctl.md) to learn more.
 
+## `v1.14.2`
+
+> 📢 When upgrading to cert-manager release 1.14, please skip `v1.14.0` and `v1.14.1` and install this patch version instead.
+
+### Changes since `v1.14.1`
+
+#### Bug or Regression
+
+- BUGFIX: cert-manager CA and SelfSigned issuers incorrectly copied the critical flag from the CSR instead of re-calculating that field themselves. (https://github.com/cert-manager/cert-manager/pull/6727, https://github.com/jetstack-bot)
+- Helm: Fix a bug in the logic that differentiates between 0 and an empty value. (https://github.com/cert-manager/cert-manager/pull/6729, https://github.com/jetstack-bot)
+
+#### Other (Cleanup or Flake)
+
+- Bump Go to 1.21.7 (https://github.com/cert-manager/cert-manager/pull/6735, https://github.com/jetstack-bot)
+
 ## `v1.14.1`
 
 cert-manager `v1.14.1` fixes bugs found *during* the release of `v1.14.0`.
 
-> 📢 When upgrading to cert-manager release 1.14, please skip `v1.14.0` and install this patch version instead.
-
 ### Changes since `v1.14.0`
 
 #### Bug or Regression
@@ -30,7 +43,7 @@ cert-manager `v1.14.1` fixes bugs found *during* the release of `v1.14.0`.
 
 ## `v1.14.0`
 
-> ⚠️ This version has known issues. Please install `v1.14.1` instead.
+> ⚠️ This version has known issues. Please install `v1.14.2` instead.
 >
 > During the release of `v1.14.0`, the Helm chart was found to use the wrong OCI image for the `cainjector` Deployment,
 > which caused the Helm installation and the static manifest based installation to fail.

diff --git a/content/docs/releases/upgrading/upgrading-1.13-1.14.md b/content/docs/releases/upgrading/upgrading-1.13-1.14.md
@@ -5,7 +5,11 @@ description: 'cert-manager installation: Upgrading v1.13 to v1.14'
 
 Before upgrading cert-manager from 1.13 to 1.14 please read the following important notes about breaking changes in 1.14:
 
-## Please install the latest patch release: `v1.14.1`
+## Please install the latest patch release: `v1.14.2`
+
+The following bugs were found in `v1.14.1` and have been fixed in `v1.14.2`:
+
+- cert-manager CA and SelfSigned issuers incorrectly copied the critical flag from the CSR instead of re-calculating that field themselves
 
 The following bugs were found during the release of `v1.14.0` and have been fixed in `v1.14.1`:
 
@@ -14,7 +18,7 @@ The following bugs were found during the release of `v1.14.0` and have been fixe
 - A bug in cmctl namespace detection prevents it being used as a startupapicheck image in namespaces other than cert-manager.
 - A bug in cmctl causes `cmctl experimental install` to panic.
 
-Read the [`v1.14.1` release notes](../release-notes/release-notes-1.14.md#v1.14.1) for more information.
+Read the  [`v1.14.2` release notes](../release-notes/release-notes-1.14.md#v1.14.2) and [`v1.14.1` release notes](../release-notes/release-notes-1.14.md#v1.14.1) for more information.
 
 ## New startupapicheck image
 

diff --git a/content/docs/tutorials/certificate-defaults/README.md b/content/docs/tutorials/certificate-defaults/README.md
@@ -89,7 +89,7 @@ Once you have your cluster environment, install the required Kubernetes packages
 1. Set some environment variables for the helm chart versions:
 
     ```shell
-    export CERT_MANAGER_CHART_VERSION="v1.14.1" \
+    export CERT_MANAGER_CHART_VERSION="v1.14.2" \
         KYVERNO_CHART_VERSION="3.1.4" \
         INGRESS_NGINX_CHART_VERSION="4.9.0"
     ```