cert-manager · wallrj · Dec 14, 2023 · Dec 12, 2023 · Dec 12, 2023 · Dec 12, 2023
diff --git a/Makefile b/Makefile
@@ -6,11 +6,11 @@ SHELL := bash
 .SUFFIXES:
 .ONESHELL:
 
-CERT_MANAGER_VERSION ?= 1.13.1
+CERT_MANAGER_VERSION ?= 1.13.3
 # Decoupled the BUNDLE_VERSION from the CERT_MANAGER_VERSION so that I can do a
 # patch release containing the fix for:
 # https://github.com/cert-manager/cert-manager/issues/5551
-export BUNDLE_VERSION ?= 1.13.1
+export BUNDLE_VERSION ?= 1.13.3
 # DO NOT PUBLISH PRE-RELEASES TO THE STABLE CHANNEL!
 # For stable releases use: `candidate stable`.
 # For pre-releases use: `candidate`.

diff --git a/README.md b/README.md
@@ -156,31 +156,31 @@ which is more than is available on most laptops.
 Download your pull secret from the [crc-download] page and supply the path in the command line below:
 
 ```sh
-make crc-instance OPENSHIFT_VERSION=4.9 PULL_SECRET=${HOME}/Downloads/pull-secret
+make crc-instance OPENSHIFT_VERSION=4.13 PULL_SECRET=${HOME}/Downloads/pull-secret
 ```
 
 This will create a VM and automatically install the chosen version of OpenShift, using a suitable version of `crc`.
 The `crc` installation, setup and start are performed by a `startup-script` which is run when the VM boots.
 You can monitor the progress of the script as follows:
 
 ```sh
-gcloud compute instances tail-serial-port-output crc-4-9
+gcloud compute instances tail-serial-port-output crc-4-13
 ```
 
 You can log in to the VM and interact with the cluster as follows:
 
 ```sh
-gcloud compute ssh crc@crc-4-9 -- -D 8080
+gcloud compute ssh crc@crc-4-13 -- -D 8080
 sudo journalctl -u google-startup-scripts.service  --output cat
-eval $(bin/crc-1.34.0 oc-env)
+eval $(bin/crc-2.28.0 oc-env)
 oc get pods -A
 ```
 
 ### Install cert-manager
 
 Log in to the VM using SSH and enable socks proxy forwarding so that you will be able to connect to the Web UI of `crc` when it starts.
 ```
-gcloud compute ssh crc@crc-4-9 -- -D 8080
+gcloud compute ssh crc@crc-4-13 -- -D 8080
 ```
 
 Now configure your web browser to use the socks5 proxy at `localhost:8080`.
@@ -215,7 +215,7 @@ And then upload the binary to the remote VM and run them against cert-manager in
 ```sh
 cd projects/cert-manager/cert-manager-olm
 make crc-e2e \
-  OPENSHIFT_VERSION=4.X \
+  OPENSHIFT_VERSION=4.13 \
   E2E_TEST=../cert-manager/_bin/test/e2e.test
 ```
 

diff --git a/bundle/manifests/acme.cert-manager.io_challenges.yaml b/bundle/manifests/acme.cert-manager.io_challenges.yaml
@@ -6,7 +6,7 @@ metadata:
     app: cert-manager
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
   name: challenges.acme.cert-manager.io
 spec:
   group: acme.cert-manager.io

diff --git a/bundle/manifests/acme.cert-manager.io_orders.yaml b/bundle/manifests/acme.cert-manager.io_orders.yaml
@@ -6,7 +6,7 @@ metadata:
     app: cert-manager
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
   name: orders.acme.cert-manager.io
 spec:
   group: acme.cert-manager.io

diff --git a/bundle/manifests/cert-manager-cluster-view_rbac.authorization.k8s.io_v1_clusterrole.yaml b/bundle/manifests/cert-manager-cluster-view_rbac.authorization.k8s.io_v1_clusterrole.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/component: controller
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
     rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
   name: cert-manager-cluster-view
 rules:

diff --git a/bundle/manifests/cert-manager-edit_rbac.authorization.k8s.io_v1_clusterrole.yaml b/bundle/manifests/cert-manager-edit_rbac.authorization.k8s.io_v1_clusterrole.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/component: controller
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"
   name: cert-manager-edit

diff --git a/bundle/manifests/cert-manager-view_rbac.authorization.k8s.io_v1_clusterrole.yaml b/bundle/manifests/cert-manager-view_rbac.authorization.k8s.io_v1_clusterrole.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/component: controller
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
     rbac.authorization.k8s.io/aggregate-to-admin: "true"
     rbac.authorization.k8s.io/aggregate-to-cluster-reader: "true"
     rbac.authorization.k8s.io/aggregate-to-edit: "true"

diff --git a/bundle/manifests/cert-manager-webhook_v1_configmap.yaml b/bundle/manifests/cert-manager-webhook_v1_configmap.yaml
@@ -7,5 +7,5 @@ metadata:
     app.kubernetes.io/component: webhook
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
   name: cert-manager-webhook
diff --git a/bundle/manifests/cert-manager-webhook_v1_service.yaml b/bundle/manifests/cert-manager-webhook_v1_service.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/component: webhook
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: webhook
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
   name: cert-manager-webhook
 spec:
   ports:

diff --git a/bundle/manifests/cert-manager.clusterserviceversion.yaml b/bundle/manifests/cert-manager.clusterserviceversion.yaml
@@ -67,9 +67,9 @@ metadata:
       ]
     capabilities: Full Lifecycle
     categories: Security
-    containerImage: quay.io/jetstack/cert-manager-controller:v1.13.1
-    createdAt: '2023-10-03T16:49:57'
-    olm.skipRange: '>=1.13.0 <1.13.1'
+    containerImage: quay.io/jetstack/cert-manager-controller:v1.13.3
+    createdAt: '2023-12-14T11:57:16'
+    olm.skipRange: '>=1.13.0 <1.13.3'
     operators.operatorframework.io/builder: operator-sdk-v1.25.0
     operators.operatorframework.io/internal-objects: |-
       [
@@ -84,7 +84,7 @@ metadata:
     operatorframework.io/arch.arm64: supported
     operatorframework.io/arch.ppc64le: supported
     operatorframework.io/arch.s390x: supported
-  name: cert-manager.v1.13.1
+  name: cert-manager.v1.13.3
   namespace: placeholder
 spec:
   apiservicedefinitions: {}
@@ -621,7 +621,7 @@ spec:
           app.kubernetes.io/component: controller
           app.kubernetes.io/instance: cert-manager
           app.kubernetes.io/name: cert-manager
-          app.kubernetes.io/version: v1.13.1
+          app.kubernetes.io/version: v1.13.3
         name: cert-manager
         spec:
           replicas: 1
@@ -642,21 +642,21 @@ spec:
                 app.kubernetes.io/component: controller
                 app.kubernetes.io/instance: cert-manager
                 app.kubernetes.io/name: cert-manager
-                app.kubernetes.io/version: v1.13.1
+                app.kubernetes.io/version: v1.13.3
             spec:
               containers:
               - args:
                 - --v=2
                 - --cluster-resource-namespace=$(POD_NAMESPACE)
                 - --leader-election-namespace=kube-system
-                - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.13.1
+                - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.13.3
                 - --max-concurrent-challenges=60
                 env:
                 - name: POD_NAMESPACE
                   valueFrom:
                     fieldRef:
                       fieldPath: metadata.namespace
-                image: quay.io/jetstack/cert-manager-controller:v1.13.1
+                image: quay.io/jetstack/cert-manager-controller:v1.13.3
                 imagePullPolicy: IfNotPresent
                 name: cert-manager-controller
                 ports:
@@ -685,7 +685,7 @@ spec:
           app.kubernetes.io/component: cainjector
           app.kubernetes.io/instance: cert-manager
           app.kubernetes.io/name: cainjector
-          app.kubernetes.io/version: v1.13.1
+          app.kubernetes.io/version: v1.13.3
         name: cert-manager-cainjector
         spec:
           replicas: 1
@@ -702,7 +702,7 @@ spec:
                 app.kubernetes.io/component: cainjector
                 app.kubernetes.io/instance: cert-manager
                 app.kubernetes.io/name: cainjector
-                app.kubernetes.io/version: v1.13.1
+                app.kubernetes.io/version: v1.13.3
             spec:
               containers:
               - args:
@@ -713,7 +713,7 @@ spec:
                   valueFrom:
                     fieldRef:
                       fieldPath: metadata.namespace
-                image: quay.io/jetstack/cert-manager-cainjector:v1.13.1
+                image: quay.io/jetstack/cert-manager-cainjector:v1.13.3
                 imagePullPolicy: IfNotPresent
                 name: cert-manager-cainjector
                 resources: {}
@@ -735,7 +735,7 @@ spec:
           app.kubernetes.io/component: webhook
           app.kubernetes.io/instance: cert-manager
           app.kubernetes.io/name: webhook
-          app.kubernetes.io/version: v1.13.1
+          app.kubernetes.io/version: v1.13.3
         name: cert-manager-webhook
         spec:
           replicas: 1
@@ -752,7 +752,7 @@ spec:
                 app.kubernetes.io/component: webhook
                 app.kubernetes.io/instance: cert-manager
                 app.kubernetes.io/name: webhook
-                app.kubernetes.io/version: v1.13.1
+                app.kubernetes.io/version: v1.13.3
             spec:
               containers:
               - args:
@@ -768,7 +768,7 @@ spec:
                   valueFrom:
                     fieldRef:
                       fieldPath: metadata.namespace
-                image: quay.io/jetstack/cert-manager-webhook:v1.13.1
+                image: quay.io/jetstack/cert-manager-webhook:v1.13.3
                 imagePullPolicy: IfNotPresent
                 livenessProbe:
                   failureThreshold: 3
@@ -897,7 +897,7 @@ spec:
   provider:
     name: The cert-manager maintainers
     url: https://cert-manager.io/
-  version: 1.13.1
+  version: 1.13.3
   webhookdefinitions:
   - admissionReviewVersions:
     - v1

diff --git a/bundle/manifests/cert-manager.io_certificaterequests.yaml b/bundle/manifests/cert-manager.io_certificaterequests.yaml
@@ -6,7 +6,7 @@ metadata:
     app: cert-manager
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
   name: certificaterequests.cert-manager.io
 spec:
   group: cert-manager.io

diff --git a/bundle/manifests/cert-manager.io_certificates.yaml b/bundle/manifests/cert-manager.io_certificates.yaml
@@ -6,7 +6,7 @@ metadata:
     app: cert-manager
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
   name: certificates.cert-manager.io
 spec:
   group: cert-manager.io

diff --git a/bundle/manifests/cert-manager.io_clusterissuers.yaml b/bundle/manifests/cert-manager.io_clusterissuers.yaml
@@ -6,7 +6,7 @@ metadata:
     app: cert-manager
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
   name: clusterissuers.cert-manager.io
 spec:
   group: cert-manager.io

diff --git a/bundle/manifests/cert-manager.io_issuers.yaml b/bundle/manifests/cert-manager.io_issuers.yaml
@@ -6,7 +6,7 @@ metadata:
     app: cert-manager
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
   name: issuers.cert-manager.io
 spec:
   group: cert-manager.io

diff --git a/bundle/manifests/cert-manager_v1_configmap.yaml b/bundle/manifests/cert-manager_v1_configmap.yaml
@@ -7,5 +7,5 @@ metadata:
     app.kubernetes.io/component: controller
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
   name: cert-manager
diff --git a/bundle/manifests/cert-manager_v1_service.yaml b/bundle/manifests/cert-manager_v1_service.yaml
@@ -7,7 +7,7 @@ metadata:
     app.kubernetes.io/component: controller
     app.kubernetes.io/instance: cert-manager
     app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/version: v1.13.1
+    app.kubernetes.io/version: v1.13.3
   name: cert-manager
 spec:
   ports:

diff --git a/hack/crc.mk b/hack/crc.mk
@@ -39,7 +39,7 @@ crc_version_4.9 := 1.39.0
 crc_version_4.10 := 2.6.0
 crc_version_4.11 := 2.12.0
 crc_version_4.12 := 2.19.0
-crc_version_4.13 := 2.20.0
+crc_version_4.13 := 2.28.0
 crc_version = ${crc_version_${OPENSHIFT_VERSION}}
 
 # Download the crc tarball