Changes since v1.10

🚨 Breaking or Notable

• We now target v1.25 as our minimum version of Kubernetes
• Activator uses TLS 1.3 as the minimum version when internal encryption is activated for communication with queue-proxy (#13887, @izabelacg)
• Domain mapping controller logic is now merged with the Serving controller. Domainmapping webhook is merged with the Serving webhook. (#14082, @skonto)
• DomainMapping/v1alpha1 is deprecated - use v1beta1 APIs (#14058, @dprotaso)

💫 New Features & Changes

• A new flag is introduced queueproxy.resource-defaults that sets resource requests, limits for Queue Proxy when enabled (applies only to cpu and memory). (#14039, @skonto)
• Activator now has a separate service account, reducing its privileges to the required minimum. (#14133, @davidhadas)
• Queue proxy resources can be configured via annotations at the service level. The resource percentage annotation is now deprecated. (#14038, @skonto)
• Sets DefaultDomain to cluster's domain instead of hardcoded svc.cluster.local (#13964, @kauana)

🐞Bug Fixes

• Autoscaler metric are validated with global autoscaling class if no class annotation is set. (#13978, @xtreme-vikram-yadav)
• Drop cluster-autoscaler.kubernetes.io/safe-to-evict annotations on our control plane to allow nodes to drain (#14035, @dprotaso)
• Fix activator load balancing when using unbounded concurrency and when you have two instances of a revision (#14028, @dprotaso)
• Fix activator load balancing when using containerConcurrency=1 (#14022, @Gekko0114)
• Queue proxy metrics reporting period is now supported for both prometheus and opencensus.
  This allows fine-grained control of how often metrics are exported via a new config map attribute. (#14019, @skonto)
• Tag to digest min TLS version is 1.2 and can be configured higher using the controller environment variable TAG_TO_DIGEST_TLS_MIN_VERSION and supports values "1.2" and "1.3" (#13962, @dprotaso)

Dependencies

Changes since v1.9.3

• Drop the cluster-autoscaler.kubernetes.io/safe-to-evict: "false" annotation on our deployments (#13984, @dprotaso)

Changes since v1.10.1

• Drop the cluster-autoscaler.kubernetes.io/safe-to-evict: "false" annotation on our deployments (#13984, @dprotaso)
• Fix activator load balancing (#14052, @dprotaso)

Changes since v1.10.0

• Tag to digest minimum TLS version was reverted back to 1.2. (#13963, @dprotaso)
  • Higher TLS versions can be configured using the controller environment variable TAG_TO_DIGEST_TLS_MIN_VERSION and supports values "1.2" and "1.3"

Changes since v1.9

Note: some container image registries support only TLS v1.2 (quay.io) so we reverted the change min TLS 1.3 change in v1.10.1 and made it configurable

🚨 Breaking or Notable

• Container-freezer has been sunset in Knative v1.10. (#13830, @psschwei)
• Controller uses TLS 1.3 as the minimum version when communicating with image registries for tag to digest resolution (#13886, @izabelacg)

💫 New Features & Changes

• Adds support for downwardAPI sources in projected volumes on Knative Services (#13896, @KauzClay)
• Controllers now have liveness and readiness probes (#13563, @skonto)
• With enabling internal-encryption, activator pods needed to be restarted when certificates are updated. The restart is not necessary anymore. (#13854, @nak3)
• ImagePullSecrets with references to unknown service accounts won't error out anymore but fail silently like Kubernetes. (#13701, @Bisht13)

🐞Bug Fixes

• Fixes issue where certificates would not get renewed when using auto-tls. (#13666, @KauzClay)
• Fix queue proxy not draining connections on shutdown (#13815, @dprotaso)

Dependencies

Changes since 1.9.2

• Our queue proxy shutdown now performs a graceful shutdown (#13829, @dprotaso)

🚨 Notable

• Min K8s Version is v1.24+ - see our release schedule for EOL dates

Changes since 1.8.5

• Queue Proxy now performs a graceful shutdown (#13836, @dprotaso)

Changes since 1.9.1

Rebuilt with go1.19.6 to address CVEs

• https://github.com/golang/go/issues?q=milestone%3AGo1.19.6+label%3ACherryPickApproved

🚨 Notable

• Min K8s Version is v1.24+ - see our release schedule for EOL dates

Changes since 1.8.4

Rebuilt with go1.19.6 to address CVEs

• https://github.com/golang/go/issues?q=milestone%3AGo1.19.6+label%3ACherryPickApproved

Changes since 1.9.0

Bumped dependencies to address CVEs

• https://pkg.go.dev/vuln/GO-2023-1571
• https://pkg.go.dev/vuln/GO-2023-1495
• https://pkg.go.dev/vuln/GO-2022-1144

🚨 Notable

• Min K8s Version is v1.24+ - see our release schedule for EOL dates