generic Receive queue :: Triage Party

Issues that may be waiting for our response
NOTE: for this to work properly, GitHub token must have read access to read organization members

Receive queue

70 unique items

Completion ETA: ~2025-11-15

Assi	Bugs awaiting follow-up	Features awaiting follow-up
nobody	cert-manager#8227 [HELM] startupapicheck is not using correct name cert-manager#8213 Duration and renew-before annotation changes in ingress resources don't trigger certificate updates 8232 cert-manager#7864 failed to call webhook: certificate has expired or is not yet valid cert-manager#8102 cert-manager-startupapicheck erroring while installation cert-manager#7862 Requesting a certificate from ZeroSSL sometimes takes more than 10 minutes to complete cert-manager#7845 ClusterIssuer.cert-manager.io "letsencrypt" is invalid: spec.acme.privateKeySecretRef: Required value... cert-manager#7768 Stuck in a loop with `multiple challenge solver pods found for challenge` cert-manager#8086 ACME ClusterIssuer not recovering after Vault restart cert-manager#7741 Certmanager attempts infinite renewals if the Issuer Certificate read from Vault has expired cert-manager#7687 Webhook refusing connection even when Ready cert-manager#7660 cert-manager produces invalid (per RFC5280) certificates when `cert sign` usage is set along with another usage cert-manager#7649 [GKE][Cert-Manager]Document Might Need Implementation Details Update to GSA/KSA Integration cert-manager#7648 Solver selector issue cert-manager#7625 Clean install fails to create Issuer cert-manager#7594 Cloudflare delegated domains returns Found no Zones for domain _acme-challenge.mydomain.com cert-manager#7522 Non standard "cert-manager.io" used in event "Reason" cert-manager#7760 Is the zone responsible for a domain changes, cert-manager will not pick it up cert-manager#7486 `"Unhandled Error" err="ingress '...' in work queue no longer exists"` should be handled (clean up dangling `Certificate`) cert-manager#7476 [Helm Chart] - Wrong handling of image registry and repository cert-manager#7438 certificate not updated after enabling SSA cert-manager#7388 Kid missing in the new order request cert-manager#7288 Missing UID in webhook challenge request cert-manager#6741 ACME account private key and URI are not updated if the path of the ACME server is changed cert-manager#8058 Cert-manager fails to import ECDSA private keys generated by openssl 8187 cert-manager#7765 Propagation tests fails when using IPv6 recursive DNS nameservers cert-manager#5048 certificate not renewed for ingress with multiple hosts and http01-edit-in-place cert-manager#4749 rfc2136 seems to not work with deep subdomains cert-manager#4685 Unexpected EOF during watch stream event decoding: unexpected EOF -- possibly due to api server upgrades / restarts cert-manager#8095 DNS-01 Delegated zone is not following CNAME and creating wrong records cert-manager#5751 Wildcard DNS domains and `cnameStrategy: Follow` don't work nicely together cert-manager#3640 Challenge Records Not Always Cleaned Up 5121 5126 7286	cert-manager#8247 Graduate otherNames feature gate from alpha to beta cert-manager#8209 Add revocation at certificate deletion cert-manager#8200 Add commonLabels support for acmesolver cert-manager#8194 Update e2e Documentation - for the make e2e-setup command cert-manager#8121 Support for Creating CertificateRequest from Kubernetes Secret cert-manager#8110 Add ability to be a incoming `HTTP-01` to outgoing `DNS-01` proxy cert-manager#7914 Output tls.crt in CA cert to another secret cert-manager#7834 Provide race condition mitigation support cert-manager#7817 Support `global.nodeSelector` in the Helm chart 7818 cert-manager#7772 Reviewing the use of https://github.com/SSLMate/go-pkcs12 cert-manager#7766 Certificate: Let me specify the concatenation order for CombinedPEM output format cert-manager#7751 Custom key usage extensions cert-manager#7747 [suggestion] Add Kustomize install documentation cert-manager#8235 Cert-manager support for Issuer-managed keys cert-manager#7673 Support for acmesolver.tolerations/affinity/nodeSelector cert-manager#7684 Add support for namespaced deployment 7678 cert-manager#7890 Cluster issuer for HTTP-01 gatewayHTTPRoute should not require a gateway parentRef cert-manager#7868 Metrics for webhook certificate cert-manager#7645 Support cross-signed intermediate CAs issued with Vault cert-manager#7510 Key Size for Acme Account Key 7646 cert-manager#7422 Please provide standalone helm chart for CRDs cert-manager#7311 helm schema validation should validate `featureGates` cert-manager#7184 Helm chart: add ability to add appprotocol to port in service 7652 cert-manager#6662 support overriding of ttl in cloudflare cert-manager#6472 Create TLSA records automatically cert-manager#6754 Schedule certificate renewal outside business hours 7399 8091 8101 8139 cert-manager#6010 Support the ACME Renewal Information (ARI) extension cert-manager#5540 Changelog annotations to chart cert-manager#2478 Allow CA issuer secret rotation cert-manager#7561 Feature Request RFC: Push notifications from cert-manager to <other service> when certificates are issued
	cert-manager#7846 ClusterIssuer.Status.Acme.URI disappeared 🌊
	cert-manager#7826 If issuer is incorrect, it is still shown as READY 🌊 cert-manager#7218 cert-manager set don't fragment (DF) bit 🌊 cert-manager#7234 Stale/Stuck Challenges should be deleted after a given timeout 🌊 7252 7286 7897
	cert-manager#7002 Confusing messaging when certificate secret name already exist 🌊
	cert-manager#5917 Waiting for DNS-01 challenge propagation: DNS record for mydomain.com not yet propagated 🌊
		cert-manager#7788 Be able to default `acme.cert-manager.io/http01-edit-in-place: "true"` behavior in deployment/chart values 🌊 cert-manager#7879 Remove no-op certificate metrics controller 🌊
		cert-manager#7473 Create certificate based on HTTPRoute configuration 🌊 7608 7839