fix(helm): update chart cert-manager to v1.15.3

[roybatty-bot]

This PR contains the following updates:

Package	Update	Change
cert-manager (source)	patch	v1.15.1 -> v1.15.3

---

Release Notes

cert-manager/cert-manager (cert-manager)

v1.15.3

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

🔗 See v1.15.0 for more information about cert-manager 1.15 and read-before-upgrade info.

📜 Changes since v1.15.2

Bug or Regression

• BUGFIX: the dynamic certificate source used by the webhook TLS server failed to detect a root CA approaching expiration, due to a calculation error. This will cause the webhook TLS server to fail renewing its CA certificate. Please upgrade before the expiration of this CA certificate is reached. (#​7232, @​cert-manager-bot)

v1.15.2

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

🔗 See v1.15.0 for more information about cert-manager 1.15 and read-before-upgrade info.

📜 Changes since v1.15.1

Bug or Regression

• BUGFIX route53: explicitly set the aws-global STS region which is now required by the github.com/aws/aws-sdk-go-v2 library. (#​7189, @cert-manager-bot)
• Bump grpc-go to fix GHSA-xr7q-jx4m-x55m (#​7167, @SgtCoDFish)
• Fix Azure DNS causing panics whenever authentication error happens (#​7188, @cert-manager-bot)
• Fix incorrect value and indentation of endpointAdditionalProperties in the PodMonitor template of the Helm chart (#​7191, @inteon)
• Fixes ACME HTTP01 challenge behavior when using Gateway API to prevent unbounded creation of HTTPRoute resources (#​7186, @cert-manager-bot)
• Upgrade golang from 1.22.3 to 1.22.5 (#​7165, @github-actions)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[roybatty-bot]

Path: cluster/core/cert-manager/helm-release.yaml
Version: v1.15.1 -> v1.15.2

@@ -849,7 +849,7 @@
 type: RuntimeDefault
 containers:
 - name: cert-manager-cainjector
- image: "quay.io/jetstack/cert-manager-cainjector:v1.15.1"
+ image: "quay.io/jetstack/cert-manager-cainjector:v1.15.2"
 imagePullPolicy: IfNotPresent
 args:
 - --v=2
@@ -908,13 +908,13 @@
 type: RuntimeDefault
 containers:
 - name: cert-manager-controller
- image: "quay.io/jetstack/cert-manager-controller:v1.15.1"
+ image: "quay.io/jetstack/cert-manager-controller:v1.15.2"
 imagePullPolicy: IfNotPresent
 args:
 - --v=2
 - --cluster-resource-namespace=$(POD_NAMESPACE)
 - --leader-election-namespace=kube-system
- - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.15.1
+ - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.15.2
 - --dns01-recursive-nameservers=1.1.1.1:53,9.9.9.9:53
 - --dns01-recursive-nameservers-only
 - --max-concurrent-challenges=60
@@ -993,7 +993,7 @@
 type: RuntimeDefault
 containers:
 - name: cert-manager-webhook
- image: "quay.io/jetstack/cert-manager-webhook:v1.15.1"
+ image: "quay.io/jetstack/cert-manager-webhook:v1.15.2"
 imagePullPolicy: IfNotPresent
 args:
 - --v=2
@@ -1242,7 +1242,7 @@
 type: RuntimeDefault
 containers:
 - name: cert-manager-startupapicheck
- image: "quay.io/jetstack/cert-manager-startupapicheck:v1.15.1"
+ image: "quay.io/jetstack/cert-manager-startupapicheck:v1.15.2"
 imagePullPolicy: IfNotPresent
 args:
 - check

[github-actions]

KICS version: v2.1.2

Category Results CRITICAL 0 HIGH 46 MEDIUM 65 LOW 97 INFO 17 TRACE 0 TOTAL 225	Metric Values Files scanned 154 Files parsed 154 Files failed to scan 0 Total executed queries 142 Queries failed to execute 0 Execution time 9

[roybatty-bot]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	secretlint	yes		no	0.81s
✅ YAML	prettier	1		0	0.32s
✅ YAML	yamllint	1		0	0.26s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by

[roybatty-bot]

Path: cluster/core/cert-manager/helm-release.yaml
Version: v1.15.1 -> v1.15.3

@@ -849,7 +849,7 @@
 type: RuntimeDefault
 containers:
 - name: cert-manager-cainjector
- image: "quay.io/jetstack/cert-manager-cainjector:v1.15.1"
+ image: "quay.io/jetstack/cert-manager-cainjector:v1.15.3"
 imagePullPolicy: IfNotPresent
 args:
 - --v=2
@@ -908,13 +908,13 @@
 type: RuntimeDefault
 containers:
 - name: cert-manager-controller
- image: "quay.io/jetstack/cert-manager-controller:v1.15.1"
+ image: "quay.io/jetstack/cert-manager-controller:v1.15.3"
 imagePullPolicy: IfNotPresent
 args:
 - --v=2
 - --cluster-resource-namespace=$(POD_NAMESPACE)
 - --leader-election-namespace=kube-system
- - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.15.1
+ - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.15.3
 - --dns01-recursive-nameservers=1.1.1.1:53,9.9.9.9:53
 - --dns01-recursive-nameservers-only
 - --max-concurrent-challenges=60
@@ -993,7 +993,7 @@
 type: RuntimeDefault
 containers:
 - name: cert-manager-webhook
- image: "quay.io/jetstack/cert-manager-webhook:v1.15.1"
+ image: "quay.io/jetstack/cert-manager-webhook:v1.15.3"
 imagePullPolicy: IfNotPresent
 args:
 - --v=2
@@ -1242,7 +1242,7 @@
 type: RuntimeDefault
 containers:
 - name: cert-manager-startupapicheck
- image: "quay.io/jetstack/cert-manager-startupapicheck:v1.15.1"
+ image: "quay.io/jetstack/cert-manager-startupapicheck:v1.15.3"
 imagePullPolicy: IfNotPresent
 args:
 - check