openservicemesh · jaellio · Apr 20, 2023 · Apr 18, 2023
@@ -14,11 +14,11 @@ type: application
 
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: 1.2.3
+version: 1.2.4
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: v1.2.3
+appVersion: v1.2.4
 
 # This specifies the minimum Kubernetes version OSM is compatible with.
 kubeVersion: ">= 1.22.9-0"

@@ -1,6 +1,6 @@
 # Open Service Mesh Helm Chart
 
-![Version: 1.2.3](https://img.shields.io/badge/Version-1.2.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v1.2.3](https://img.shields.io/badge/AppVersion-v1.2.3-informational?style=flat-square)
+![Version: 1.2.4](https://img.shields.io/badge/Version-1.2.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v1.2.4](https://img.shields.io/badge/AppVersion-v1.2.4-informational?style=flat-square)
 
 A Helm chart to install the [OSM](https://github.com/openservicemesh/osm) control plane on Kubernetes.
 
@@ -127,14 +127,14 @@ The following table lists the configurable parameters of the osm chart and their
 | osm.grafana.port | int | `3000` | Grafana service's port |
 | osm.grafana.rendererImage | string | `"grafana/grafana-image-renderer:3.2.1"` | Image used for Grafana Renderer |
 | osm.grafana.tolerations | list | `[]` | Node tolerations applied to control plane pods. The specified tolerations allow pods to schedule onto nodes with matching taints. |
-| osm.image.digest | object | `{"osmBootstrap":"sha256:c1c3798353dbd9d9a7507e7588256ab6bc8985eb4695c90f8b9093b99ab5d78e","osmCRDs":"sha256:9ffa1c8502a81685bb011af395618f59ca85538c3eba886fd651481b3c8880e4","osmController":"sha256:693b4125aa0ba4bd22baeffa63fd6a8d089c7a8c130e02a121b984a1d6c09b9f","osmHealthcheck":"sha256:e6b3562d18bce78aa11acc641d7d55ac6b51e0b83fbd86eaaef2a56967f05f6b","osmInjector":"sha256:d62d49af514b5639cb83f92d9359ad80f61f1ce8936d581ca601d22c9b3dfa9e","osmPreinstall":"sha256:13abbc0802adce9f293f426917d3d7920c6be33aa32b4deb5aa9f714534a7356","osmSidecarInit":"sha256:f0717caf400d81fb00e63e64710fb78d76da1d396155408b3fc56eeb80d6f0bd"}` | Image digest (defaults to latest compatible tag) |
-| osm.image.digest.osmBootstrap | string | `"sha256:c1c3798353dbd9d9a7507e7588256ab6bc8985eb4695c90f8b9093b99ab5d78e"` | osm-boostrap's image digest |
-| osm.image.digest.osmCRDs | string | `"sha256:9ffa1c8502a81685bb011af395618f59ca85538c3eba886fd651481b3c8880e4"` | osm-crds' image digest |
-| osm.image.digest.osmController | string | `"sha256:693b4125aa0ba4bd22baeffa63fd6a8d089c7a8c130e02a121b984a1d6c09b9f"` | osm-controller's image digest |
-| osm.image.digest.osmHealthcheck | string | `"sha256:e6b3562d18bce78aa11acc641d7d55ac6b51e0b83fbd86eaaef2a56967f05f6b"` | osm-healthcheck's image digest |
-| osm.image.digest.osmInjector | string | `"sha256:d62d49af514b5639cb83f92d9359ad80f61f1ce8936d581ca601d22c9b3dfa9e"` | osm-injector's image digest |
-| osm.image.digest.osmPreinstall | string | `"sha256:13abbc0802adce9f293f426917d3d7920c6be33aa32b4deb5aa9f714534a7356"` | osm-preinstall's image digest |
-| osm.image.digest.osmSidecarInit | string | `"sha256:f0717caf400d81fb00e63e64710fb78d76da1d396155408b3fc56eeb80d6f0bd"` | Sidecar init container's image digest |
+| osm.image.digest | object | `{"osmBootstrap":"sha256:a0a5f231e65cda27ade22f890354217e59982b32f07904ea0d706bf3caaec763","osmCRDs":"sha256:601241946a5088573e4aefde62bbc5832dd9ade1d72556b0ae841fbf727c22bd","osmController":"sha256:15cfc8401ea2de1d4e7d19122ed9e731d60eab8c3cadff4e5b5e86ce277828cb","osmHealthcheck":"sha256:d5a9ad914a7279c52316ee968b97715b0dc854d77cf02a2b68389bb46f656b6f","osmInjector":"sha256:7713f44dfc796f9c9029acb82b46142e50ff34f89dd95953d9c415544c3941e3","osmPreinstall":"sha256:dc0353add9b2efd1d55a9e358172d9595188a3eaa7078bc2d07c38882e731802","osmSidecarInit":"sha256:d290df023e305b3a76c8b22fd0a3cfcc7504377e97bfdfeb256b1ca9c4d59d68"}` | Image digest (defaults to latest compatible tag) |
+| osm.image.digest.osmBootstrap | string | `"sha256:a0a5f231e65cda27ade22f890354217e59982b32f07904ea0d706bf3caaec763"` | osm-boostrap's image digest |
+| osm.image.digest.osmCRDs | string | `"sha256:601241946a5088573e4aefde62bbc5832dd9ade1d72556b0ae841fbf727c22bd"` | osm-crds' image digest |
+| osm.image.digest.osmController | string | `"sha256:15cfc8401ea2de1d4e7d19122ed9e731d60eab8c3cadff4e5b5e86ce277828cb"` | osm-controller's image digest |
+| osm.image.digest.osmHealthcheck | string | `"sha256:d5a9ad914a7279c52316ee968b97715b0dc854d77cf02a2b68389bb46f656b6f"` | osm-healthcheck's image digest |
+| osm.image.digest.osmInjector | string | `"sha256:7713f44dfc796f9c9029acb82b46142e50ff34f89dd95953d9c415544c3941e3"` | osm-injector's image digest |
+| osm.image.digest.osmPreinstall | string | `"sha256:dc0353add9b2efd1d55a9e358172d9595188a3eaa7078bc2d07c38882e731802"` | osm-preinstall's image digest |
+| osm.image.digest.osmSidecarInit | string | `"sha256:d290df023e305b3a76c8b22fd0a3cfcc7504377e97bfdfeb256b1ca9c4d59d68"` | Sidecar init container's image digest |
 | osm.image.name | object | `{"osmBootstrap":"osm-bootstrap","osmCRDs":"osm-crds","osmController":"osm-controller","osmHealthcheck":"osm-healthcheck","osmInjector":"osm-injector","osmPreinstall":"osm-preinstall","osmSidecarInit":"init"}` | Image name defaults |
 | osm.image.name.osmBootstrap | string | `"osm-bootstrap"` | osm-boostrap's image name |
 | osm.image.name.osmCRDs | string | `"osm-crds"` | osm-crds' image name |

@@ -32,19 +32,19 @@ osm:
     # -- Image digest (defaults to latest compatible tag)
     digest:
       # -- osm-controller's image digest
-      osmController: sha256:693b4125aa0ba4bd22baeffa63fd6a8d089c7a8c130e02a121b984a1d6c09b9f
+      osmController: sha256:15cfc8401ea2de1d4e7d19122ed9e731d60eab8c3cadff4e5b5e86ce277828cb
       # -- osm-injector's image digest
-      osmInjector: sha256:d62d49af514b5639cb83f92d9359ad80f61f1ce8936d581ca601d22c9b3dfa9e
+      osmInjector: sha256:7713f44dfc796f9c9029acb82b46142e50ff34f89dd95953d9c415544c3941e3
       # -- Sidecar init container's image digest
-      osmSidecarInit: sha256:f0717caf400d81fb00e63e64710fb78d76da1d396155408b3fc56eeb80d6f0bd
+      osmSidecarInit: sha256:d290df023e305b3a76c8b22fd0a3cfcc7504377e97bfdfeb256b1ca9c4d59d68
       # -- osm-crds' image digest
-      osmCRDs: sha256:9ffa1c8502a81685bb011af395618f59ca85538c3eba886fd651481b3c8880e4
+      osmCRDs: sha256:601241946a5088573e4aefde62bbc5832dd9ade1d72556b0ae841fbf727c22bd
       # -- osm-boostrap's image digest
-      osmBootstrap: sha256:c1c3798353dbd9d9a7507e7588256ab6bc8985eb4695c90f8b9093b99ab5d78e
+      osmBootstrap: sha256:a0a5f231e65cda27ade22f890354217e59982b32f07904ea0d706bf3caaec763
       # -- osm-preinstall's image digest
-      osmPreinstall: sha256:13abbc0802adce9f293f426917d3d7920c6be33aa32b4deb5aa9f714534a7356
+      osmPreinstall: sha256:dc0353add9b2efd1d55a9e358172d9595188a3eaa7078bc2d07c38882e731802
       # -- osm-healthcheck's image digest
-      osmHealthcheck: sha256:e6b3562d18bce78aa11acc641d7d55ac6b51e0b83fbd86eaaef2a56967f05f6b
+      osmHealthcheck: sha256:d5a9ad914a7279c52316ee968b97715b0dc854d77cf02a2b68389bb46f656b6f
 
 
   # -- `osm-controller` image pull secret

@@ -1,4 +1,12 @@
 # Release Notes
+
+## Release v1.2.4
+
+### Notable changes
+- Deprecate support for TLS v1.0 and TLS v1.1 for the Envoy proxy TLSMaxProtocolVersion option
+- Reduce minimum TLS version from v1.3 to v1.2 for the osm controller, verifier, and health servers
+- Support robust CRD conversion patching on upgrade to ensure reconciliation is controlled by the newer OSM version
+
 ## Release v1.2.3
 
 ### Notable changes