diff --git a/security/cert_manager_operator/cert-manager-operator-release-notes.adoc b/security/cert_manager_operator/cert-manager-operator-release-notes.adoc index bc40ada069..5c60e9dad9 100644 --- a/security/cert_manager_operator/cert-manager-operator-release-notes.adoc +++ b/security/cert_manager_operator/cert-manager-operator-release-notes.adoc @@ -12,6 +12,48 @@ These release notes track the development of {cert-manager-operator}. For more information, see xref:../../security/cert_manager_operator/index.adoc#cert-manager-operator-about[About the {cert-manager-operator}]. +[id="cert-manager-operator-release-notes-1-17-0_{context}"] +== {cert-manager-operator} 1.17.0 + +Issued: 2025-08-06 + +The following advisories are available for the {cert-manager-operator} 1.17.0: + +* link:https://access.redhat.com/errata/RHBA-2025:13182[RHBA-2025:13182] +* link:https://access.redhat.com/errata/RHBA-2025:13134[RHBA-2025:13134] +* link:https://access.redhat.com/errata/RHBA-2025:13133[RHBA-2025:13133] + +Version `1.17.0` of the {cert-manager-operator} is based on the upstream cert-manager version `v1.17.4`. For more information, see the link:https://cert-manager.io/docs/releases/release-notes/release-notes-1.17#v1174[cert-manager project release notes for v1.17.4]. + +[id="cert-manager-operator-1-17-0-bugs_{context}"] +=== Bug fixes + +* Previously, the `status` field in the `IstioCSR` custom resource (CR) was not set to `Ready` even after the successful deployment of Istio‑CSR. With this fix, the `status` field is correctly set to `Ready`, ensuring consistent and reliable status reporting. (link:https://issues.redhat.com/browse/CM-546[CM-546]) + +[id="cert-manager-operator-1-17-0-features-enhancements_{context}"] +=== New features and enhancements + +*Support to configure resource requests and limits for ACME HTTP‑01 solver pods* + +With this release, the {cert-manager-operator} supports configuring CPU and memory resource requests and limits for ACME HTTP‑01 solver pods. You can configure the CPU and memory resource requests and limits by using the following overridable arguments in the `CertManager` custom resource (CR): + +* `--acme-http01-solver-resource-limits-cpu` +* `--acme-http01-solver-resource-limits-memory` +* `--acme-http01-solver-resource-request-cpu` +* `--acme-http01-solver-resource-request-memory` + +For more information, see xref:../../security/cert_manager_operator/cert-manager-customizing-api-fields.adoc#cert-manager-overridable-arguments_cert-manager-customizing-api-fields[Overridable arguments for the cert‑manager components]. + +[id="cert-manager-operator-1-17-0-CVEs_{context}"] +=== CVEs + +* link:https://access.redhat.com/security/cve/CVE-2025-22866[CVE-2025-22866] +* link:https://access.redhat.com/security/cve/CVE-2025-22868[CVE-2025-22868] +* link:https://access.redhat.com/security/cve/CVE-2025-22872[CVE-2025-22872] +* link:https://access.redhat.com/security/cve/CVE-2025-22870[CVE-2025-22870] +* link:https://access.redhat.com/security/cve/CVE-2025-27144[CVE-2025-27144] +* link:https://access.redhat.com/security/cve/CVE-2025-22871[CVE-2025-22871] + [id="cert-manager-operator-release-notes-1-16-1_{context}"] == {cert-manager-operator} 1.16.1