queue to be emptied once a day
Unprioritized issues older than 7 days (253)
Resolution: Add a priority/ or triage/ label
Average age: 454.5d, Avg wait: 216.4d
Uncommented older than 7 days (154)
Resolution: Add a priority/ or triage/ label
Average age: 539.5d, Avg wait: 485.8d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 8121 |  |
Support for Creating CertificateRequest from Kubernetes Secret | 5mo | 4mo | 5mo |  |
kind/feature
triage/needs-information
|
contributor-last recv recv-q similar
|
|||
| 8085 |  |
Feature Request: Add annotation to disable automatic certificate renewal
|
5mo | 5mo | 5mo |  |
priority/important-longterm
|
pr-closed recv similar
|
|||
| 8058 |  |
Cert-manager fails to import ECDSA private keys generated by openssl | 6mo | 5mo | 6mo | |
kind/bug
priority/important-longterm
|
pr-changes-requested recv
|
|||
| 7826 |  |
If issuer is incorrect, it is still shown as READY | 
| 8mo | 4mo | 8mo | |
kind/bug
priority/important-longterm
|
assigned assignee-updated pr-new-commits recv recv-q
|
||
| 7288 |  |
Missing UID in webhook challenge request | 1y | 3wk | 1y | |
kind/bug
priority/backlog
lifecycle/rotten
|
contributor-last recv
|
|||
| 6820 | |
Ongoing dependency evaluation |
|
2y | 2y | 2y | |
lifecycle/frozen
priority/important-longterm
|
contributor-last recv
|
||
| 6741 |  |
ACME account private key and URI are not updated if the path of the ACME server is changed |
7
|
2y | 3mo | 2y |  |
lifecycle/frozen
kind/bug
priority/important-soon
|
recv
|
||
| 6472 |  |
Create TLSA records automatically |
15
|
2y | 6wk | 2y |   |
kind/feature
priority/backlog
|
contributor-last recv
|
||
| 5917 |  |
Waiting for DNS-01 challenge propagation: DNS record for mydomain.com not yet propagated | 
|
42
|
2y | 4wk | 2y |                             |
kind/bug
priority/important-longterm
|
assigned assignee-updated recv recv-q
|
|
| 5751 |  |
Wildcard DNS domains and `cnameStrategy: Follow` don't work nicely together
|
|
3y | 3mo | 3y |    |
lifecycle/frozen
kind/bug
priority/important-soon
|
pr-closed recv recv-q
|
||
| 5540 |  |
Changelog annotations to chart |
|
3y | 4wk | 3y | |
kind/feature
priority/backlog
|
recv
|
||
| 1549 | |
Brand guideline page | 2y | 2y | 2y | |
priority/backlog
|
contributor-last recv
|
|||
| 1473 |  |
Add ArtifactHub packages to website | 2y | 2y | 2y |
priority/backlog
|
recv
|
||||
| 1063 |  |
"Securing Ingresses with Venafi" tutorial contains link to missing manifest
|
3y | 1y | 3y | |
priority/important-longterm
|
pr-merged recv
|
|||
| 850 | |
Document available cert-manager Prometheus metrics |
|
4y | 3y | 4y |  |
documentation
good first issue
priority/important-longterm
|
recv recv-q
|
||
| 354 |  |
DigitalOcean access-token should not be base64-encoded | 5y | 5y | 5y |  |
priority/awaiting-more-evidence
|
recv recv-q
|
|||
| 237 |  |
docs for ACMEChallengeSolverHTTP01Ingress doesn't specify what `class` values are available
|
|
5y | 5y | 5y | |
priority/backlog
kind/documentation
|
contributor-last pr-closed recv
|
||
| 228 | |
Documentation needs correction for external-account-bindings
|
5y | 11mo | 5y |  |
good first issue
priority/backlog
kind/documentation
|
contributor-last pr-merged recv
|
|||
| 197 | |
Document ACME account mismatch | 5y | 1y | 5y |  |
good first issue
priority/backlog
kind/documentation
|
recv recv-q
|
|||
| 130 |  |
FAQ: How does cert-manager handle ingresses with valid TLS secrets? | 6y | 5y | 6y | |
help wanted
priority/backlog
kind/documentation
|
contributor-last recv
|
|||
| 76 |  |
Upgrading from v0.10 to v0.11 - missing cainjector annotation | 6y | 5y | 6y |  |
priority/backlog
kind/documentation
|
contributor-last recv
|
|||
| 3 | |
Restrict operator RBAC permissions
|
5y | 2y | 5y |
priority/backlog
|
pr-merged recv
|
||||
| 83 |  |
As cmctl user, I want to use different kubectl context on command line ( --context='kubectl-context-abc' ) |
3
|
2y | 2y | 2y |
priority/important-longterm
|
recv
|
|||
| 690 | |
Clean up Presets
|
3y | 2y | 3y |
priority/backlog
|
pr-merged recv
|
||||
| 594 | |
Document infra image bumps and versioning | 4y | 2y | 4y |
priority/backlog
|
recv
|
||||
| 38 |  |
Set repository to be a GitHub template repository |
|
3y | 2y | 3y |
priority/important-longterm
|
recv
|
|||
| 128 previously listed items omitted | |||||||||||
Important soon, but no updates in 90 days (17)
Resolution: Downgrade to important-longterm
Average age: 1298.7d, Avg wait: 71.9d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 6741 | |
ACME account private key and URI are not updated if the path of the ACME server is changed |
7
|
2y | 3mo | 2y | |
lifecycle/frozen
kind/bug
priority/important-soon
|
recv
|
|
| 6709 |  |
1.14 Release Review |
3
|
2y | 2y | 2y |     |
lifecycle/frozen
priority/important-soon
|
commented contributor-last send
|
|
| 6331 |  |
CSR not signed by referenced private key |
10
|
2y | 3mo | 2y |     |
lifecycle/frozen
kind/bug
priority/important-soon
|
commented contributor-last recv-q send
|
|
| 5298 | |
Complete the Migration Away From Jetstack Names | 3y | 2y | 2y |  |
lifecycle/frozen
kind/cleanup
priority/important-soon
|
commented member-last send
|
||
| 3992 |  |
Add non-CRD yaml file |
4
|
4y | 3mo | 2y |     |
priority/important-soon
area/deploy
|
commented recv
|
|
| 5751 | |
Wildcard DNS domains and `cnameStrategy: Follow` don't work nicely together
|
|
3y | 3mo | 3y | |
lifecycle/frozen
kind/bug
priority/important-soon
|
pr-closed recv recv-q
|
|
| 2930 |  |
Mirror to gcr.io or dockerhub | 
|
2
29
|
5y | 1y | 1y |          |
lifecycle/frozen
kind/feature
priority/important-soon
area/deploy
|
assigned assignee-updated commented contributor-last send
|
| 3381 |  |
Setup separate package for cert-manager API | 
|
5
|
5y | 1y | 1y |  |
lifecycle/frozen
kind/feature
priority/important-soon
|
assigned assignee-updated commented member-last send
|
| 5867 |  |
Controller can't handle hitting request rate limits of zerossl ACME API
|
7
12
31
|
3y | 11mo | 2y |               |
lifecycle/frozen
kind/bug
priority/important-soon
|
commented pr-closed pr-merged recv-q send
|
|
| 7234 |  |
AWS Route53: Stale/Stuck Challenges should be deleted after a given timeout |
|
4
|
2y | 3mo | 1y |    |
kind/bug
priority/important-soon
|
assigned assignee-updated commented contributor-last pr-closed pr-merged pr-reviewed-with-comment recv recv-q
|
| 1425 | |
The `issuer.vault.spec.caBundleSecretRef` docs are missing | 2y | 2y |
priority/important-soon
|
|||||
| 955 | |
Document when the vault pki role required setting `require_cn=false` |
2
|
3y | 1y |  |
priority/important-soon
|
|||
| 802 | |
Spelling errors are unclear in pull request CI results and spell checker is unmaintained
|
4y | 2y |  |
kind/bug
priority/important-soon
|
contributor-last pr-merged
|
|||
| 195 | |
Document keystores | 5y | 3y | 5y | |
priority/important-soon
kind/documentation
|
commented contributor-last send
|
||
| 174 |  |
Add documentation for CRD conversion webhook ca injection | 5y | 5y | 5y | |
help wanted
priority/important-soon
kind/documentation
|
commented member-last send
|
||
| 1174 |  |
Document the docker images and how to find them |
|
3y | 3y | 3y | |
good first issue
priority/important-soon
kind/documentation
|
commented member-last send
|
|
| 127 | |
cmctl version reports only the old CRD version if I upgrade cert-manager without including the CRDs | 1y | 1y |
priority/important-soon
|
Important longterm, but no updates in 180 days (21)
Resolution: Downgrade to backlog
Average age: 1417.4d, Avg wait: 244.1d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 6969 | |
Should upgrade status managed fields from CSA to SSA when ServerSideApply feature gate enabled | 2y | 1y | 2y | |
lifecycle/frozen
kind/bug
priority/important-longterm
|
commented contributor-last send
|
|||
| 6051 |  |
Detecting Gateway hostnames based on attached HTTPRoutes
|
7
31
|
2y | 7mo | 8mo |        |
lifecycle/frozen
kind/feature
priority/important-longterm
|
commented pr-merged send
|
||
| 4950 | |
General flakiness of our end-to-end suite
|
3
|
4y | 2y | 3y |  |
lifecycle/frozen
priority/important-longterm
kind/flake
|
commented member-last pr-closed pr-merged send
|
||
| 4191 | |
Setting default values for Pod's "resources"? |
7
|
4y | 1y | 1y |  |
lifecycle/frozen
priority/important-longterm
|
commented contributor-last recv-q send
|
||
| 3521 | |
Integration with ExternalDNS |
4
52
|
5y | 6mo | 1y |            |
help wanted
lifecycle/frozen
kind/feature
priority/important-longterm
|
commented recv-q
|
||
| 2525 |  |
Better support multi-namespace & single-namespace deployments
|
27
|
6y | 10mo | 2y |          |
lifecycle/frozen
kind/feature
priority/important-longterm
area/deploy
|
commented contributor-last pr-closed send similar
|
||
| 2178 | |
Handling 'unregistering' certificates from Venafi TPP |
22
|
6y | 2y | 2y |       |
lifecycle/frozen
kind/feature
priority/important-longterm
area/venafi
|
commented member-last send
|
||
| 1194 |  |
Confusing paragraph - cert-manager integration. | 3y | 2y | 2y | |
documentation
priority/important-longterm
|
commented member-last send
|
|||
| 975 | |
Some pages do not make it clear what the user should read next | 3y | 1y |
priority/important-longterm
|
||||||
| 401 | |
Bring tutorials up to date | 5y | 3y | 3y | |
priority/important-longterm
|
commented member-last send
|
|||
| 1186 | |
Document that/why we don't use Helm's CRD installation mechanism |
| 3y | 2y | 2y | |
good first issue
priority/important-longterm
kind/documentation
|
assigned assignee-updated commented member-last send
|
||
| 223 | |
Document wildcard certificate tutorial | 5y | 5y | 5y | |
priority/important-longterm
kind/documentation
|
commented contributor-last send
|
|||
| 58 |  |
Support injection pem into an existing configmap |
|
8
|
3y | 10mo | 10mo | |
priority/important-longterm
lifecycle/frozen
|
assigned assignee-updated commented member-last pr-closed pr-merged pr-unreviewed send
|
|
| 129 | |
Increase e2e test timeouts | 2y | 2y |
priority/important-longterm
|
||||||
| 98 | |
Document new release process for all repos |
| 2y | 2y |
priority/important-longterm
|
assigned
|
||||
| 3 | |
Make unit testing easier/make examples work
|
6y | 2y | 4y |    |
priority/important-longterm
|
commented member-last pr-closed send
|
|||
| 5 previously listed items omitted: #6820 #1063 #850 #83 #38 | |||||||||||
Pull Requests: Review Ready (94)
Resolution: Review requests or mark them as do-not-merge/work-in-progress
Average age: 128.2d, Avg wait: 82.8d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 8588 |  |
feat(deploy/charts): adding validate for prometheus crds |
|
2d | 3h | 16h | |
release-note
kind/feature
size/M
dco-signoff: yes
area/deploy
|
collaborator-last commented new-commits
|
|
| 8602 |  |
fix(deps): update module github.com/segmentio/encoding to v0.5.4 (master)
|
5h | 5h | 5h | |
size/XS
release-note-none
kind/cleanup
dco-signoff: yes
area/testing
ok-to-test
dependencies
|
contributor-last recv recv-q similar unreviewed
|
||
| 8600 | |
fix(deps): update module google.golang.org/api to v0.271.0 (master)
|
11h | 5h | 11h | |
release-note-none
size/S
kind/cleanup
dco-signoff: yes
ok-to-test
dependencies
|
contributor-last recv recv-q similar unreviewed
|
||
| 8594 |  |
Fix typo "commonname" in PreferredChain field comment | 1d | 1d | 1d | |
release-note-none
size/S
area/api
kind/cleanup
needs-ok-to-test
dco-signoff: yes
area/deploy
|
contributor-last recv recv-q unreviewed
|
||
| 8592 |  |
docs: Update Helm repository references to OCI registry | 1d | 1d | 1d | |
release-note
size/S
kind/documentation
needs-ok-to-test
dco-signoff: yes
area/deploy
|
recv recv-q unreviewed
|
||
| 8577 |  |
fix(keymanager): preserve expected secret when cleaning up duplicates | 5d | 1d | 5d | |
release-note
needs-ok-to-test
size/M
dco-signoff: yes
needs-kind
|
new-commits recv recv-q
|
||
| 8571 | |
fix(certificate-shim): trying to fix flaky tests | 7d | 4d | 4d | |
size/L
release-note-none
kind/cleanup
dco-signoff: yes
|
collaborator-last commented new-commits
|
||
| 8395 |  |
Clarify code around DNS01 Self Check | 1mo | 4d | 5d |  |
release-note-none
kind/cleanup
size/M
area/acme
dco-signoff: yes
ok-to-test
area/acme/dns01
|
commented recv recv-q reviewed-with-comment
|
||
| 8258 | |
feat(certificate): renewal policy and windows code |
3
|
3mo | 2d | 2d | |
release-note
area/api
kind/feature
size/XXL
area/acme
dco-signoff: yes
area/testing
area/acme/dns01
area/deploy
|
collaborator-last commented open-milestone reviewed-with-comment similar
|
|
| 7733 |  |
fixes #5864: cert-manager CA to issue certs after verify with CA Certs Validity |
|
10mo | 5d | 9mo |   |
size/L
release-note
kind/bug
kind/feature
lifecycle/rotten
dco-signoff: yes
ok-to-test
|
commented contributor-last new-commits recv recv-q
|
|
| 8574 | |
feat(design): proposed ari design | 5d | 5d | |
size/L
release-note-none
kind/design
dco-signoff: yes
|
contributor-last recv-q unreviewed
|
|||
| 7852 | |
adds cli option configure ACME challange authorization timeout |
|
8mo | 5d | 7mo | |
release-note
area/api
kind/feature
size/M
area/acme
dco-signoff: yes
ok-to-test
|
commented new-commits recv recv-q similar
|
|
| 8523 |  |
feat(helm): add opt-in ttlSecondsAfterFinished for startupapicheck Job |
2
|
3wk | 7d | 8d | |
release-note
size/S
dco-signoff: yes
ok-to-test
area/deploy
needs-kind
|
commented recv reviewed-with-comment similar
|
|
| 8534 |  |
feat: add --dns01-timeout flag to make DNS01 provider API timeout configurable | 16d | 16d | 16d | |
release-note
area/api
needs-ok-to-test
size/M
area/acme
dco-signoff: yes
area/acme/dns01
needs-kind
|
contributor-last recv recv-q unreviewed
|
||
| 8480 |  |
Add Subject Key Identifier (SKI) to issued certificates |
3
|
4wk | 3wk | 4wk | |
size/L
release-note
kind/feature
dco-signoff: yes
area/testing
ok-to-test
|
commented new-commits recv
|
|
| 8440 |  |
feat(chart): Set ttlSecondsAfterFinished for statupapicheck | 6wk | 4wk | 6wk | |
release-note
size/S
kind/feature
needs-ok-to-test
dco-signoff: yes
area/deploy
|
contributor-last recv recv-q similar unreviewed
|
||
| 8464 | |
improve dynamic source serving certificate renewal logic | 5wk | 4wk | 5wk | |
release-note
kind/bug
size/M
dco-signoff: yes
ok-to-test
|
commented contributor-last recv unreviewed
|
||
| 8255 | |
add dns issuer secrets validation before marking it as ready | 3mo | 5wk | 2mo |  |
release-note
size/XL
lgtm
kind/bug
area/acme
dco-signoff: yes
area/testing
ok-to-test
|
commented contributor-last new-commits recv recv-q
|
||
| 8407 | |
Use generics to make predicates typed | 7wk | 7wk | 7wk | |
size/L
release-note-none
kind/cleanup
dco-signoff: yes
area/testing
|
commented member-last new-commits
|
||
| 8367 | |
feat(helm) add startupProbe and readinessProbe to cert-manager-controller | 2mo | 2mo | 2mo | |
release-note-none
kind/feature
needs-ok-to-test
size/M
dco-signoff: yes
area/deploy
|
commented contributor-last recv recv-q unreviewed
|
||
| 8262 |  |
Bugfix #7388 kid missing issue with Infisical ACME server or any other ACME that requires EAB |
|
3mo | 2mo | 3mo |  |
size/L
release-note
needs-ok-to-test
area/acme
dco-signoff: yes
needs-kind
|
commented recv unreviewed
|
|
| 7289 | |
Design proposal for delayed certificate activation | 1y | 3mo | 1y | |
size/L
release-note-none
kind/design
needs-ok-to-test
lifecycle/stale
dco-signoff: yes
|
commented contributor-last recv recv-q reviewed-with-comment
|
||
| 7583 |  |
Support for ACME servers that don't finalize within the ACME client finalizer retry window | 1y | 3mo | 1y |  |
release-note
kind/bug
needs-ok-to-test
size/M
area/acme
dco-signoff: yes
|
recv recv-q unreviewed
|
||
| 7614 |  |
Lower the minimum certificate duration from 1 hour to 5 minutes | 1y | 4mo | 1y | |
release-note
size/S
area/api
kind/feature
dco-signoff: yes
ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 2002 | |
[master] Freeze 1.19 and bump versions before merging release-next | 8h | 8h |  |
dco-signoff: yes
size/XXL
|
contributor-last recv-q reviewed-with-comment
|
|||
| 1997 | |
[release-next] Release Notes for cert-manager v1.20.0 | 11h | 8h | |
dco-signoff: yes
size/L
|
contributor-last new-commits recv-q
|
|||
| 1587 |  |
Custom Certificate Support for cert-manager Webhook Endpoint | 1y | 9h | 1y | |
dco-signoff: yes
size/S
|
recv recv-q unreviewed
|
||
| 1607 |  |
Document Log Level settings. Document DNS01 delegation using multiple providers. | 1y | 9h | 1y | |
dco-signoff: yes
size/M
|
recv recv-q unreviewed
|
||
| 1909 |  |
docs: add ACK RRSA supported AliDNS webhook | 2mo | 9h | 6wk | |
size/XS
dco-signoff: yes
|
commented new-commits recv
|
||
| 1602 |  |
acme troubleshooting: how to fix errored challenges | 1y | 9h | 1y | |
size/XS
dco-signoff: yes
|
contributor-last recv recv-q reviewed-with-comment
|
||
| 1989 | |
chore(deps): update misc npm packages | 8d | 9h | 8d | |
dco-signoff: yes
size/M
ok-to-test
dependencies
|
recv recv-q similar unreviewed
|
||
| 1994 | |
chore(deps): lock file maintenance | 2d | 9h | 2d | |
dco-signoff: yes
size/L
ok-to-test
dependencies
|
recv recv-q unreviewed
|
||
| 1959 | |
chore(deps): update eslint monorepo to v10 (major) | 4wk | 9h | 4wk | |
size/XS
dco-signoff: yes
ok-to-test
dependencies
|
contributor-last recv recv-q unreviewed
|
||
| 1992 | |
chore(deps): update actions/setup-node digest to 53b8394 | 7d | 9h | 7d | |
size/XS
dco-signoff: yes
ok-to-test
dependencies
|
recv recv-q similar unreviewed
|
||
| 210 | |
chore(deps): pin dependencies | 3mo | 4h | 3mo | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 261 | |
fix(deps): update module google.golang.org/api to v0.271.0 | 1d | 11h | 1d | |
dco-signoff: yes
size/M
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 262 | |
fix(deps): update module cloud.google.com/go/storage to v1.61.0 | 17h | 17h | 17h | |
dco-signoff: yes
size/S
dependencies
ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 260 | |
chore(deps): update docker.io/library/golang docker tag to v1.26 | 1d | 1d | 1d | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 258 | |
chore(deps): update docker.io/library/golang:1.26-alpine docker digest to 2389ebf | 5d | 5d | 5d | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 225 | |
fix(deps): update module helm.sh/helm/v3 to v4 | 3mo | 5d | 3mo | |
dco-signoff: yes
size/M
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 760 | |
fix(deps): update misc go deps | 13h | 5h | 13h | |
dco-signoff: yes
size/M
ok-to-test
dependencies
|
contributor-last recv recv-q unreviewed
|
||
| 637 |  |
Fix/chartadditional annotations for cli args | 5mo | 3wk | 5mo | |
dco-signoff: yes
size/XS
ok-to-test
|
commented contributor-last recv recv-q reviewed-with-comment
|
||
| 838 |  |
[CI] Merge self-upgrade-main into main | 6h | 5h | 6h | |
dco-signoff: yes
size/M
release-note-none
kind/cleanup
ok-to-test
skip-review
|
contributor-last recv recv-q similar unreviewed
|
||
| 837 | |
fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0 | 13h | 6h | 13h | |
dco-signoff: yes
size/XS
ok-to-test
dependencies
|
contributor-last recv recv-q similar unreviewed
|
||
| 835 | |
Fix race condition with default deny and approving policies | 1d | 1d | 1d | |
dco-signoff: yes
size/L
needs-ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 834 | |
test: add unit tests for ServiceAccount CEL library | 1d | 1d | 1d | |
dco-signoff: yes
size/L
needs-ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 833 | |
fix: correct typos in code comments and documentation | 1d | 1d | 1d | |
dco-signoff: yes
needs-ok-to-test
size/S
|
contributor-last recv recv-q unreviewed
|
||
| 895 |  |
Allow specifying a custom type for Secret targets | 13d | 13h | 5d | |
dco-signoff: yes
size/XL
ok-to-test
|
commented new-commits recv
|
||
| 871 | |
Introduce KAL optional fields checks |
|
4wk | 4d | 4d | |
dco-signoff: yes
size/XL
|
commented member-last reviewed-with-comment
|
|
| 900 |  |
chart: add startupapicheck to ensure trust-manager is ready after install | 9d | 9d | 9d | |
dco-signoff: yes
needs-ok-to-test
size/XL
|
contributor-last recv recv-q unreviewed
|
||
| 683 | |
feat: Add a very basic pre-commit configuration | 7mo | 3wk | 6mo | |
dco-signoff: yes
size/XS
lifecycle/stale
|
commented contributor-last new-commits
|
||
| 420 | |
fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0 | 13h | 5h | 13h | |
dependencies
dco-signoff: yes
size/L
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 417 | |
fix(deps): update module k8s.io/klog/v2 to v2.140.0 | 4d | 4d | 4d | |
dependencies
dco-signoff: yes
size/S
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 188 | |
Remove SetCertificateRequestConditionError |
3
|
1y | 13d | 13d | |
dco-signoff: yes
size/XXL
|
commented member-last new-commits
|
|
| 600 | |
fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0 | 13h | 6h | 13h | |
dco-signoff: yes
size/L
ok-to-test
dependencies
|
contributor-last recv recv-q similar unreviewed
|
||
| 474 | |
fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0 | 13h | 4h | 13h | |
dco-signoff: yes
size/L
ok-to-test
dependencies
|
contributor-last recv recv-q similar unreviewed
|
||
| 303 |  |
feat: add support for setting private key encoding | 3mo | 2mo | 3mo | |
dco-signoff: yes
size/L
needs-ok-to-test
|
recv recv-q reviewed-with-comment similar
|
||
| 148 |  |
limit-namespaces for namespace-scope deployments |
|
1y | 1y | 1y |  |
dco-signoff: no
size/S
needs-ok-to-test
|
recv recv-q unreviewed
|
|
| 345 | |
fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0 | 13h | 13h | 13h | |
dco-signoff: yes
dependencies
size/L
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 187 | |
fix(deps): update misc go deps | 11d | 4h | 11d | |
dco-signoff: yes
size/L
ok-to-test
dependencies
|
contributor-last recv recv-q unreviewed
|
||
| 192 | |
[CI] Merge self-upgrade-main into main | 5h | 5h | 5h | |
dco-signoff: yes
size/S
kind/cleanup
release-note-none
ok-to-test
skip-review
|
contributor-last recv recv-q similar unreviewed
|
||
| 190 | |
fix(deps): update module golang.org/x/sync to v0.20.0
|
2d | 2d | 2d | |
dco-signoff: yes
size/XS
ok-to-test
dependencies
skip-review
|
contributor-last recv recv-q similar unreviewed
|
||
| 71 | |
Refactor filesystem.go and adapt tests to use a real file system | 1y | 8mo | 8mo | |
dco-signoff: yes
size/L
|
commented member-last reviewed-with-comment
|
||
| 189 | |
fix(deps): update module k8s.io/klog/v2 to v2.140.0 | 4d | 4d | 4d | |
dco-signoff: yes
size/S
ok-to-test
dependencies
|
contributor-last recv recv-q similar unreviewed
|
||
| 138 | |
chore(deps): update docker.io/golang:1.26 docker digest to c7e98cc | 7d | 1h | 7d | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 143 | |
fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0 | 13h | 13h | 13h | |
dco-signoff: yes
size/L
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 140 | |
chore(deps): update dependency golangci/golangci-lint to v2.11.3 | 5d | 17h | 5d | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 142 | |
fix(deps): update module k8s.io/klog/v2 to v2.140.0 | 4d | 4d | 4d | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 434 | |
fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0 | 13h | 4h | 13h | |
dco-signoff: yes
size/L
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 435 | |
[CI] Merge self-upgrade-main into main | 5h | 5h | 5h | |
dco-signoff: yes
size/S
ok-to-test
release-note-none
kind/cleanup
skip-review
|
contributor-last recv recv-q similar unreviewed
|
||
| 429 | |
chore(deps): update docker/login-action action to v4 | 6d | 6d | 6d | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 68 | |
chore(deps): update terraform google to v7.23.0 | 5wk | 9h | 5wk | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 1157 |  |
Update k8s-infra-prow images, cert-manager-infra-images images as needed | 8d | 11h | 8d | |
dco-signoff: yes
size/M
|
contributor-last recv recv-q unreviewed
|
||
| 1159 | |
fix(deps): update module google.golang.org/api to v0.271.0 | 1d | 13h | 1d | |
dco-signoff: yes
size/M
ok-to-test
dependencies
|
contributor-last recv recv-q similar unreviewed
|
||
| 560 | |
chore(deps): update tools | 8d | 9h | 8d | |
dco-signoff: yes
size/M
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 564 | |
chore(deps): update dependency cert-manager/cert-manager to v1.20.0 | 13h | 13h | 13h | |
dco-signoff: yes
size/S
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 549 | |
Split (helm) generate-crds target | 3wk | 3wk | 3wk | |
dco-signoff: yes
size/M
|
commented member-last reviewed-with-comment
|
||
| 55 | |
feat: add test module | 2y | 2y | 2y | |
dco-signoff: yes
size/M
|
commented contributor-last recv reviewed-with-comment
|
||
| 470 | |
feat(helm): adding `helm-diff` target |
|
4mo | 3mo | 3mo | |
dco-signoff: yes
size/S
cybr
ok-to-test
|
commented contributor-last new-commits recv recv-q
|
|
| 109 | |
fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0 | 13h | 13h | 13h | |
dco-signoff: yes
size/L
ok-to-test
dependencies
|
contributor-last recv recv-q similar unreviewed
|
||
| 64 |  |
Add imagePullSecrets to template | 2y | 2y | 2y |
size/XS
dco-signoff: yes
needs-ok-to-test
|
contributor-last recv unreviewed
|
|||
| 59 |  |
cleanup: remove unused NOTES.txt file | 2y | 2y | 2y |
size/XS
dco-signoff: yes
needs-ok-to-test
|
contributor-last recv unreviewed
|
|||
| 1 | |
Manage the cert-manager GitHub organisation from this repo | 2y | 2y | 2y | |
dco-signoff: yes
size/XXL
|
commented member-last unreviewed
|
||
| 58 | |
chore(deps): update misc github actions | 1d | 1d | 1d | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 8 |  |
Optionally output a unified diff |
|
2mo | 3wk | 3wk | |
dco-signoff: yes
size/XL
needs-ok-to-test
|
commented recv recv-q unreviewed
|
|
| 13 | |
Various QA fixes | 3wk | 3wk | 3wk | |
dco-signoff: yes
size/L
needs-ok-to-test
|
commented new-commits recv
|
||
| 4 | |
Add support for custom license templates | 2y | 6mo | |
dco-signoff: yes
size/S
|
contributor-last recv-q unreviewed
|
|||
| 457 | |
fix(deps): update module github.com/cert-manager/cert-manager to v1.20.0 | 13h | 13h | 13h | |
size/M
ok-to-test
dependencies
dco-signoff: yes
|
contributor-last recv recv-q similar unreviewed
|
||
| 454 | |
fix(deps): update module google.golang.org/api to v0.271.0 | 1d | 9h | 1d | |
size/M
ok-to-test
dependencies
dco-signoff: yes
|
contributor-last recv recv-q similar unreviewed
|
||
| 455 | |
Replace math/rand with math/rand/v2 | 1d | 1d | 1d | |
size/S
dco-signoff: yes
|
contributor-last recv recv-q unreviewed
|
||
| 453 | |
fix(deps): update module k8s.io/klog/v2 to v2.140.0 | 4d | 4d | 4d | |
size/XS
ok-to-test
dependencies
dco-signoff: yes
|
contributor-last recv recv-q similar unreviewed
|
||
| 345 |  |
chore: add existing securityContext settings to values | 4mo | 4mo | 4mo | |
size/M
dco-signoff: yes
|
contributor-last recv recv-q similar unreviewed
|
||
| 143 |  |
feat: allow creating or reusing an existing sa | 2y | 9mo | 2y |  |
ok-to-test
|
recv recv-q unreviewed
|
||
| 141 |  |
re-adding required clusterrole permission | 2y | 1y | 2y | |
size/XS
|
recv unreviewed
|
Unkinded Issues (228)
Resolution: Add a kind/ or triage/support label
Average age: 627.6d, Avg wait: 273.2d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 7895 | |
if certificate is already expired, it shown like a True |
2
|
7mo | 2mo | 5mo |   |
help wanted
priority/important-soon
|
commented pr-new-commits pr-reviewed-with-comment recv
|
||
| 7699 | |
Adding Helm Unittest to all certmanager projects |
| 10mo | 2mo | 2mo | |
priority/backlog
|
assigned assignee-updated commented member-last send
|
||
| 6799 |  |
ACME challenges stopped working after 1.13/1.14 update |
|
2y | 9d | 2y |   |
priority/critical-urgent
lifecycle/rotten
|
commented contributor-last recv recv-q
|
||
| 5861 |  |
cert manager API showing error - "x509: certificate has expired or is not yet valid" |
|
3
|
3y | 2mo | 2mo |    |
good first issue
lifecycle/frozen
priority/important-longterm
|
assigned assignee-updated commented contributor-last pr-unreviewed send similar
|
|
| 6179 |  |
CRDs shouldn't be templated in Helm |
5
2
30
|
2y | 2d | 6mo |           |
priority/backlog
lifecycle/stale
|
commented contributor-last recv-q send
|
||
| 1262 | |
v1.9 to v1.10 upgrade instructions does not mention container name change |
| 2y | 1y | 2y | |
priority/backlog
|
assigned assignee-updated commented member-last send
|
||
| 1101 |  |
Feature request for updating documentation. | 3y | 2y | 2y | |
priority/backlog
|
commented member-last send similar
|
|||
| 320 | |
Document how to install cert-manager using gitops and known issues with particular gitops implementations
|
5
|
5y | 2y | 5y |   |
documentation
help wanted
priority/backlog
|
commented pr-merged recv-q
|
||
| 2 | |
Set up periodic job to publish an experimental release build |
|
|
6y | 4y | |
priority/backlog
|
assigned contributor-last
|
||
| 830 |  |
Race condition with a combination of approving policies and a default deny policy | 5d | 5d | 5d |
recv
|
|||||
| 908 |  |
v0.22.0: image template does not work when installing trust-manager and cert-manager from one umbrella chart |
3
|
20h | 20h | 20h |
recv
|
||||
| 297 |  |
Allow all resources to be namespaced |
7
|
2y | 5mo | 5mo |  |
priority/backlog
|
commented member-last send
|
||
| 33 |  |
Support CRDs as target |
5
|
3y | 2mo | 8mo | |
priority/backlog
lifecycle/stale
|
commented contributor-last send
|
||
| 45 |  |
Unable to mount and read only file error |
5
|
4y | 2y | 2y |     |
priority/awaiting-more-evidence
|
commented send
|
||
| 132 | |
Investigate test timeouts | 2y | 2y |
priority/backlog
|
||||||
| 33 | |
Create e2e test to validate CertificateRequest garbage collection |
| 3y | 2y | 2y | |
priority/backlog
|
assigned commented member-last send
|
||
| 81 | |
Configuring Peribolos for Github org management | 7y | 2y | 2y | |
priority/backlog
|
commented member-last send
|
|||
| 3 | |
Migrating all cert-manager projects to "Makefile modules" | 2y | 3mo | 8mo | |
priority/backlog
|
commented member-last
|
|||
| 43 | |
Allow non-Venafi employee maintainers full release capabilities |
|
3
|
1y | 3mo | 3mo | |
priority/backlog
|
assigned assignee-updated commented member-last
|
|
| 27 |  |
failed with: OpenAPI spec does not exist
|
2
6
|
4y | 2y | 2y |        |
priority/critical-urgent
|
commented pr-closed pr-unreviewed send
|
||
| 208 previously listed items omitted | |||||||||||
Unprioritized Recent Issues (257)
Resolution: Add a priority/ or triage/ label
Average age: 447.5d, Avg wait: 213.1d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 8591 |  |
GKE Gateway controller + ClusterIssuer configured for http01 create a solver pod that works but that does not attach to the gateway | 1d | 20h | 1d |  |
kind/bug
|
recv recv-q
|
|||
| 8586 |  |
Misconfiguration caused hammering of DigitalOcean API | 3d | 3d | 3d |
kind/bug
|
recv
|
||||
| 255 previously listed items omitted | |||||||||||
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 4 previously listed items omitted: #8586 #8591 #830 #908 | |||||||||||
New, has multiple reactions, but not important-soon (1)
Resolution: Check if issue should be prioritized as important-soon
Average age: 0.8d, Avg wait: 0.5d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 908 | |
v0.22.0: image template does not work when installing trust-manager and cert-manager from one umbrella chart |
3
|
20h | 20h | 20h |
recv
|
New, has multiple commenters, but not important-soon: No matching items
needs information, has update (1)
Resolution: Comment and remove triage/needs-information tag
Average age: 162.7d, Avg wait: 158.6d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 8121 | |
Support for Creating CertificateRequest from Kubernetes Secret | 5mo | 4mo | 5mo | |
kind/feature
triage/needs-information
|
contributor-last recv recv-q similar
|
Recently updated issue has a question (3)
Resolution: Add an answer
Average age: 1381.3d, Avg wait: 2.5d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 7751 |  |
Custom key usage extensions | 10mo | 6d | 5wk |  |
kind/feature
|
commented recv recv-q
|
||
| 1292 |  |
Allowing skipping HTTP01 and DNS01 self-check on a per-solver basis
|
17
4
230
|
7y | 3d | 4y |                                                        |
area/api
help wanted
kind/feature
priority/important-longterm
area/acme
|
commented pr-closed recv-q send
|
|
| 60 |  |
overriding trusted namespace |
10
18
|
3y | 6d | 10mo |       |
commented recv-q send
|