chore(deps): update helm release cert-manager to >=1.17.1 <1.17.2

[usa-reddragon-renovate-ce]

This PR contains the following updates:

Package	Update	Change
cert-manager (source)	patch	>=1.17.0 <1.17.1 -> >=1.17.1 <1.17.2

---

Release Notes

cert-manager/cert-manager (cert-manager)

v1.17.1

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This release is primarily intended to address a breaking change in Cloudflare's API which impacted ACME DNS-01 challenges using Cloudflare.

Many thanks to the community members who reported this issue!

Changes by Kind

Bug or Regression

• ❗ Fix issuing of certificates via DNS01 challenges on Cloudflare after a breaking change to the Cloudflare API (#​7565, @​LukeCarrier)
• Bump go to 1.23.6 to address CVE-2025-22866 reported by Trivy (#​7563, @​SgtCoDFish

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

Kustomization Diff

Changes

${\tt\large\color{green}+1\enspace\color{red}-\negthinspace1}$

Click to expand

--- infrastructure/cert-manager/app Kustomization: cert-manager/cert-manager HelmRelease: cert-manager/cert-manager

+++ infrastructure/cert-manager/app Kustomization: cert-manager/cert-manager HelmRelease: cert-manager/cert-manager

@@ -12,13 +12,13 @@

     spec:
       chart: cert-manager
       interval: 1m0s
       sourceRef:
         kind: HelmRepository
         name: jetstack
-      version: '>=1.17.0 <1.17.1'
+      version: '>=1.17.1 <1.17.2'
   driftDetection:
     mode: enabled
   interval: 1m0s
   releaseName: cert-manager
   values:
     cainjector:

[github-actions]

HelmRelease Diff

Changes

${\tt\large\color{green}+5\enspace\color{red}-\negthinspace5}$

Click to expand

--- HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-cainjector

+++ HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-cainjector

@@ -31,13 +31,13 @@

       securityContext:
         runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: cert-manager-cainjector
-        image: quay.io/jetstack/cert-manager-cainjector:v1.17.0
+        image: quay.io/jetstack/cert-manager-cainjector:v1.17.1
         imagePullPolicy: IfNotPresent
         args:
         - --v=2
         - --leader-election-namespace=kube-system
         ports:
         - containerPort: 9402
--- HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager

+++ HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager

@@ -31,19 +31,19 @@

       securityContext:
         runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: cert-manager-controller
-        image: quay.io/jetstack/cert-manager-controller:v1.17.0
+        image: quay.io/jetstack/cert-manager-controller:v1.17.1
         imagePullPolicy: IfNotPresent
         args:
         - --v=2
         - --cluster-resource-namespace=$(POD_NAMESPACE)
         - --leader-election-namespace=kube-system
-        - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.17.0
+        - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.17.1
         - --dns01-recursive-nameservers-only
         - --dns01-recursive-nameservers=1.1.1.1:53,8.8.8.8:53
         - --max-concurrent-challenges=60
         ports:
         - containerPort: 9402
           name: http-metrics
--- HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-webhook

+++ HelmRelease: cert-manager/cert-manager Deployment: cert-manager/cert-manager-webhook

@@ -31,13 +31,13 @@

       securityContext:
         runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: cert-manager-webhook
-        image: quay.io/jetstack/cert-manager-webhook:v1.17.0
+        image: quay.io/jetstack/cert-manager-webhook:v1.17.1
         imagePullPolicy: IfNotPresent
         args:
         - --v=2
         - --secure-port=10250
         - --dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)
         - --dynamic-serving-ca-secret-name=cert-manager-webhook-ca
--- HelmRelease: cert-manager/cert-manager Job: cert-manager/cert-manager-startupapicheck

+++ HelmRelease: cert-manager/cert-manager Job: cert-manager/cert-manager-startupapicheck

@@ -31,13 +31,13 @@

       securityContext:
         runAsNonRoot: true
         seccompProfile:
           type: RuntimeDefault
       containers:
       - name: cert-manager-startupapicheck
-        image: quay.io/jetstack/cert-manager-startupapicheck:v1.17.0
+        image: quay.io/jetstack/cert-manager-startupapicheck:v1.17.1
         imagePullPolicy: IfNotPresent
         args:
         - check
         - api
         - --wait=1m
         - -v