cert-manager: 1.17.4 -> 1.18.6
Change-Id: I88cd9d9ef02f81f8fbfa9cce2c164ff093b09b49
diff --git a/charts/cert-manager/values.yaml b/charts/cert-manager/values.yaml
index a8c94f8..e9d3931 100644
--- a/charts/cert-manager/values.yaml
+++ b/charts/cert-manager/values.yaml
@@ -117,14 +117,14 @@
enabled: false
# This configures the minimum available pods for disruptions. It can either be set to
- # an integer (e.g. 1) or a percentage value (e.g. 25%).
+ # an integer (e.g., 1) or a percentage value (e.g., 25%).
# It cannot be used if `maxUnavailable` is set.
# +docs:property
# +docs:type=unknown
# minAvailable: 1
# This configures the maximum unavailable pods for disruptions. It can either be set to
- # an integer (e.g. 1) or a percentage value (e.g. 25%).
+ # an integer (e.g., 1) or a percentage value (e.g., 25%).
# it cannot be used if `minAvailable` is set.
# +docs:property
# +docs:type=unknown
@@ -176,7 +176,7 @@
# Override the "cert-manager.name" value, which is used to annotate some of
# the resources that are created by this Chart (using "app.kubernetes.io/name").
# NOTE: There are some inconsistencies in the Helm chart when it comes to
-# these annotations (some resources use eg. "cainjector.name" which resolves
+# these annotations (some resources use, e.g., "cainjector.name" which resolves
# to the value "cainjector").
# +docs:property
# nameOverride: "my-cert-manager"
@@ -231,10 +231,10 @@
# kubernetesAPIBurst: 9000
# numberOfConcurrentWorkers: 200
# enableGatewayAPI: true
-# # Feature gates as of v1.17.0. Listed with their default values.
+# # Feature gates as of v1.18.1. Listed with their default values.
# # See https://cert-manager.io/docs/cli/controller/
# featureGates:
-# AdditionalCertificateOutputFormats: true # BETA - default=true
+# AdditionalCertificateOutputFormats: true # GA - default=true
# AllAlpha: false # ALPHA - default=false
# AllBeta: false # BETA - default=false
# ExperimentalCertificateSigningRequestControllers: false # ALPHA - default=false
@@ -246,8 +246,10 @@
# ServerSideApply: false # ALPHA - default=false
# StableCertificateRequestName: true # BETA - default=true
# UseCertificateRequestBasicConstraints: false # ALPHA - default=false
-# UseDomainQualifiedFinalizer: true # BETA - default=false
+# UseDomainQualifiedFinalizer: true # GA - default=true
# ValidateCAA: false # ALPHA - default=false
+# DefaultPrivateKeyRotationPolicyAlways: true # BETA - default=true
+# ACMEHTTP01IngressPathTypeExact: true # BETA - default=true
# # Configure the metrics server for TLS
# # See https://cert-manager.io/docs/devops-tips/prometheus-metrics/#tls
# metricsTLSConfig:
@@ -278,7 +280,7 @@
# referencing these signer names will be auto-approved by cert-manager. Defaults to just
# approving the cert-manager.io Issuer and ClusterIssuer issuers. When set to an empty
# array, ALL issuers will be auto-approved by cert-manager. To disable the auto-approval,
-# because eg. you are using approver-policy, you can enable 'disableAutoApproval'.
+# because, e.g., you are using approver-policy, you can enable 'disableAutoApproval'.
# ref: https://cert-manager.io/docs/concepts/certificaterequest/#approval
# +docs:property
approveSignerNames:
@@ -502,7 +504,7 @@
# ServiceMonitor resource.
# Otherwise, 'prometheus.io' annotations are added to the cert-manager and
# cert-manager-webhook Deployments.
- # Note that you can not enable both PodMonitor and ServiceMonitor as they are
+ # Note that you cannot enable both PodMonitor and ServiceMonitor as they are
# mutually exclusive. Enabling both will result in an error.
enabled: true
@@ -522,7 +524,8 @@
# The target port to set on the ServiceMonitor. This must match the port that the
# cert-manager controller is listening on for metrics.
- targetPort: 9402
+ # +docs:type=string,integer
+ targetPort: http-metrics
# The path to scrape for metrics.
path: /metrics
@@ -556,7 +559,7 @@
# +docs:property
endpointAdditionalProperties: {}
- # Note that you can not enable both PodMonitor and ServiceMonitor as they are mutually exclusive. Enabling both will result in an error.
+ # Note that you cannot enable both PodMonitor and ServiceMonitor as they are mutually exclusive. Enabling both will result in an error.
podmonitor:
# Create a PodMonitor to add cert-manager to Prometheus.
enabled: false
@@ -706,14 +709,14 @@
enabled: false
# This property configures the minimum available pods for disruptions. Can either be set to
- # an integer (e.g. 1) or a percentage value (e.g. 25%).
+ # an integer (e.g., 1) or a percentage value (e.g., 25%).
# It cannot be used if `maxUnavailable` is set.
# +docs:property
# +docs:type=unknown
# minAvailable: 1
# This property configures the maximum unavailable pods for disruptions. Can either be set to
- # an integer (e.g. 1) or a percentage value (e.g. 25%).
+ # an integer (e.g., 1) or a percentage value (e.g., 25%).
# It cannot be used if `minAvailable` is set.
# +docs:property
# +docs:type=unknown
@@ -1073,14 +1076,14 @@
enabled: false
# `minAvailable` configures the minimum available pods for disruptions. It can either be set to
- # an integer (e.g. 1) or a percentage value (e.g. 25%).
+ # an integer (e.g., 1) or a percentage value (e.g., 25%).
# Cannot be used if `maxUnavailable` is set.
# +docs:property
# +docs:type=unknown
# minAvailable: 1
# `maxUnavailable` configures the maximum unavailable pods for disruptions. It can either be set to
- # an integer (e.g. 1) or a percentage value (e.g. 25%).
+ # an integer (e.g., 1) or a percentage value (e.g., 25%).
# Cannot be used if `minAvailable` is set.
# +docs:property
# +docs:type=unknown