cert-manager(v1.18.3): Enhanced Certificate Handling, Smarter Issuer Reconciliation, and Improved Diagnostics

๐Ÿ“‹ Recommended Actions โœ… No Immediate Action Required No immediate action required. This release primarily provides stability and quality-of-life improvements. Review the updates to leverage enhanced certificate handling and improve your troubleshooting experience. ๐Ÿ“ Summary cert-manager(v1.18.3) boosts reliability and user experience. It now supports significantly larger certificates and chains, crucial for complex deployments with many SANs. A critical fix prevents unnecessary certificate re-issuance stemming from IssuerRef defaulting. Plus, clearer error messages for malformed PEM data greatly simplify troubleshooting. Upgrade for a more stable and robust certificate management experience. ...

October 15, 2025 ยท Daniel Grenemark

istio(1.26.1): Gateway API v1.3 Support, Enhanced CA Bundle Validation, and Istioctl Fixes

๐Ÿ“‹ Recommended Actions โš ๏ธ Action Required Review your Gateway API configurations, particularly AllowedRoutes.namespaces.from settings, as None is no longer supported and will cause validation errors. For pluginca users, ensure your cacerts bundle is complete to avoid istiod startup failures due to new, stricter validation. Upgrading is recommended for improved stability and security hardening. ๐Ÿ“ Summary Istio 1.26.1 lands with crucial updates, primarily focusing on robust Gateway API integration and enhanced security. This release promotes Gateway API to v1.3.0, alongside a critical fix that resolves istiod panics when processing complex Gateway API hostnames. Notably, a breaking change from upstream Gateway API means AllowedRoutes.namespaces.from: None is no longer valid, requiring configuration updates. ...

May 29, 2025 ยท Daniel Grenemark