queue to be emptied once a day
Unprioritized issues older than 7 days (281)
Resolution: Add a priority/ or triage/ label
Average age: 517.2d, Avg wait: 247.0d
Uncommented older than 7 days (155)
Resolution: Add a priority/ or triage/ label
Average age: 624.7d, Avg wait: 575.3d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 8121 |  |
Support for Creating CertificateRequest from Kubernetes Secret | 1y | 2mo | 1y |  |
kind/feature
triage/needs-information
lifecycle/rotten
|
contributor-last recv recv-q similar
|
|||
| 6820 | |
Ongoing dependency evaluation |
|
2y | 2y | 2y | |
lifecycle/frozen
priority/important-longterm
|
contributor-last recv
|
||
| 6741 |  |
ACME account private key and URI are not updated if the path of the ACME server is changed |
7
|
2y | 10mo | 2y |  |
lifecycle/frozen
kind/bug
priority/important-soon
|
pr-unreviewed recv
|
||
| 6472 |  |
Create TLSA records automatically |
18
|
2y | 2mo | 2y |      |
kind/feature
priority/backlog
|
pr-reviewed-with-comment recv recv-q
|
||
| 5917 |  |
Waiting for DNS-01 challenge propagation: DNS record for mydomain.com not yet propagated | 
|
43
|
3y | 16d | 3y |                              |
kind/bug
priority/important-longterm
lifecycle/stale
|
assigned assignee-updated contributor-last recv recv-q
|
|
| 5540 |  |
Changelog annotations to chart |
|
4y | 8mo | 4y | |
kind/feature
priority/backlog
|
recv
|
||
| 1549 | |
Brand guideline page | 2y | 2y | 2y | |
priority/backlog
|
contributor-last recv
|
|||
| 1063 |  |
"Securing Ingresses with Venafi" tutorial contains link to missing manifest
|
4y | 2y | 4y | |
priority/important-longterm
|
pr-merged recv
|
|||
| 1473 |  |
Add ArtifactHub packages to website | 2y | 2y | 2y |
priority/backlog
|
recv
|
||||
| 354 |  |
DigitalOcean access-token should not be base64-encoded | 6y | 5y | 6y |  |
priority/awaiting-more-evidence
|
pr-unreviewed recv recv-q
|
|||
| 237 |  |
docs for ACMEChallengeSolverHTTP01Ingress doesn't specify what `class` values are available
|
|
6y | 6y | 6y | |
priority/backlog
kind/documentation
|
contributor-last pr-closed recv
|
||
| 850 | |
Document available cert-manager Prometheus metrics |
|
4y | 3y | 4y |  |
documentation
good first issue
priority/important-longterm
|
pr-closed pr-unreviewed recv recv-q
|
||
| 197 | |
Document ACME account mismatch | 6y | 2y | 6y |  |
good first issue
priority/backlog
kind/documentation
|
pr-changes-requested recv recv-q
|
|||
| 130 |  |
FAQ: How does cert-manager handle ingresses with valid TLS secrets? | 6y | 6y | 6y | |
help wanted
priority/backlog
kind/documentation
|
contributor-last recv
|
|||
| 76 |  |
Upgrading from v0.10 to v0.11 - missing cainjector annotation | 6y | 6y | 6y |  |
priority/backlog
kind/documentation
|
contributor-last recv
|
|||
| 3 | |
Restrict operator RBAC permissions
|
6y | 2y | 6y |
priority/backlog
|
pr-merged recv
|
||||
| 83 |  |
As cmctl user, I want to use different kubectl context on command line ( --context='kubectl-context-abc' ) |
6
|
2y | 2y | 2y |
priority/important-longterm
|
recv
|
|||
| 690 | |
Clean up Presets
|
4y | 2y | 4y |
priority/backlog
|
pr-merged recv
|
||||
| 594 | |
Document infra image bumps and versioning | 5y | 2y | 5y |
priority/backlog
|
recv
|
||||
| 38 |  |
Set repository to be a GitHub template repository |
|
4y | 2y | 4y |
priority/important-longterm
|
recv
|
|||
| 135 previously listed items omitted | |||||||||||
Important soon, but no updates in 90 days (14)
Resolution: Downgrade to important-longterm
Average age: 1544.4d, Avg wait: 74.7d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 7895 |  |
if certificate is already expired, it shown like a True |
2
|
1y | 5mo | 5mo |       |
help wanted
priority/important-soon
|
collaborator-last commented pr-closed pr-reviewed-with-comment pr-unreviewed send
|
|
| 6741 | |
ACME account private key and URI are not updated if the path of the ACME server is changed |
7
|
2y | 10mo | 2y | |
lifecycle/frozen
kind/bug
priority/important-soon
|
pr-unreviewed recv
|
|
| 6709 | |
1.14 Release Review |
3
|
2y | 2y | 2y |    |
lifecycle/frozen
priority/important-soon
|
commented contributor-last send
|
|
| 5298 | |
Complete the Migration Away From Jetstack Names | 4y | 2y | 2y |  |
lifecycle/frozen
kind/cleanup
priority/important-soon
|
commented member-last send
|
||
| 3992 |  |
Add non-CRD yaml file |
5
|
5y | 5mo | 2y |     |
priority/important-soon
area/deploy
|
commented recv
|
|
| 2930 |  |
Mirror to gcr.io or dockerhub | 
|
2
29
|
6y | 4mo | 2y |            |
lifecycle/frozen
kind/feature
priority/important-soon
area/deploy
|
assigned assignee-updated commented recv-q send
|
| 5867 |  |
Controller can't handle hitting request rate limits of zerossl ACME API
|
7
12
31
|
3y | 2y | 2y |               |
lifecycle/frozen
kind/bug
priority/important-soon
|
commented pr-closed pr-merged recv-q send
|
|
| 3381 |  |
Setup separate package for cert-manager API | 
|
6
|
6y | 2y | 2y |  |
lifecycle/frozen
kind/feature
priority/important-soon
|
assigned assignee-updated commented member-last send
|
| 1425 | |
The `issuer.vault.spec.caBundleSecretRef` docs are missing | 2y | 2y |
priority/important-soon
|
pr-reviewed-with-comment
|
||||
| 955 | |
Document when the vault pki role required setting `require_cn=false` |
2
|
4y | 2y |  |
priority/important-soon
|
|||
| 802 | |
Spelling errors are unclear in pull request CI results and spell checker is unmaintained
|
4y | 2y |  |
kind/bug
priority/important-soon
|
contributor-last pr-merged
|
|||
| 195 | |
Document keystores | 6y | 3y | 6y | |
priority/important-soon
kind/documentation
|
commented contributor-last send
|
||
| 174 |  |
Add documentation for CRD conversion webhook ca injection | 6y | 6y | 6y | |
help wanted
priority/important-soon
kind/documentation
|
commented member-last send
|
||
| 127 | |
cmctl version reports only the old CRD version if I upgrade cert-manager without including the CRDs | 2y | 2y |
priority/important-soon
|
Important longterm, but no updates in 180 days (23)
Resolution: Downgrade to backlog
Average age: 1574.0d, Avg wait: 297.2d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 7514 |  |
Replace some of the webhook functionality with `ValidatingAdmissionPolicy` & CEL |
|
2y | 8mo | 1y | |
kind/feature
priority/important-longterm
|
commented recv
|
||
| 6969 | |
Should upgrade status managed fields from CSA to SSA when ServerSideApply feature gate enabled | 2y | 2y | 2y | |
lifecycle/frozen
kind/bug
priority/important-longterm
|
commented contributor-last send
|
|||
| 5959 |  |
`ImagePullBackoff` on `cm-acme-http-solver` pod, if using private registries |
23
|
3y | 10mo | 2y |      |
lifecycle/frozen
kind/bug
priority/important-longterm
|
commented contributor-last recv-q send
|
||
| 4191 | |
Setting default values for Pod's "resources"? |
7
|
5y | 2y | 2y |  |
lifecycle/frozen
priority/important-longterm
|
commented contributor-last recv-q send
|
||
| 4685 | |
Unexpected EOF during watch stream event decoding: unexpected EOF -- possibly due to api server upgrades / restarts |
12
|
4y | 1y | 1y |        |
lifecycle/frozen
kind/bug
priority/important-longterm
|
commented contributor-last recv
|
||
| 6051 |  |
Detecting Gateway hostnames based on attached HTTPRoutes
|
7
35
|
3y | 1y | 1y |        |
lifecycle/frozen
kind/feature
priority/important-longterm
|
commented pr-merged send
|
||
| 3521 | |
Integration with ExternalDNS |
4
55
|
5y | 1y | 2y |            |
help wanted
lifecycle/frozen
kind/feature
priority/important-longterm
|
commented recv-q
|
||
| 2525 |  |
Better support multi-namespace & single-namespace deployments
|
30
|
6y | 1y | 2y |         |
lifecycle/frozen
kind/feature
priority/important-longterm
area/deploy
|
commented contributor-last pr-closed send
|
||
| 2820 |  |
Add ability to set `pathlen:0` for CA certs in `X509v3 Basic Constraints`
|
|
|
6y | 7mo | 7mo |    |
area/api
good first issue
kind/feature
priority/important-longterm
|
assigned assignee-updated commented pr-closed pr-merged recv-q send
|
|
| 1194 |  |
Confusing paragraph - cert-manager integration.
|
3y | 6mo | 3y |  |
documentation
priority/important-longterm
|
commented contributor-last pr-merged send
|
|||
| 1186 | |
Document that/why we don't use Helm's CRD installation mechanism |
| 3y | 2y | 2y | |
good first issue
priority/important-longterm
kind/documentation
|
assigned assignee-updated commented member-last send
|
||
| 975 | |
Some pages do not make it clear what the user should read next | 4y | 2y |
priority/important-longterm
|
||||||
| 223 | |
Document wildcard certificate tutorial | 6y | 6y | 6y | |
priority/important-longterm
kind/documentation
|
commented contributor-last send
|
|||
| 401 | |
Bring tutorials up to date | 5y | 3y | 3y | |
priority/important-longterm
|
commented member-last send
|
|||
| 58 |  |
Support injection pem into an existing configmap |
|
8
|
4y | 1y | 1y | |
priority/important-longterm
lifecycle/frozen
|
assigned assignee-updated commented member-last pr-closed pr-merged pr-unreviewed send
|
|
| 129 | |
Increase e2e test timeouts | 2y | 2y |
priority/important-longterm
|
||||||
| 98 | |
Document new release process for all repos |
| 2y | 2y |
priority/important-longterm
|
assigned
|
||||
| 3 | |
Make unit testing easier/make examples work
|
7y | 2y | 4y |    |
priority/important-longterm
|
commented member-last pr-closed send
|
|||
| 5 previously listed items omitted: #6820 #1063 #850 #83 #38 | |||||||||||
Pull Requests: Review Ready (126)
Resolution: Review requests or mark them as do-not-merge/work-in-progress
Average age: 145.1d, Avg wait: 81.1d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 9482 |  |
fix(deps): update cloud go deps (master) | 1d | 11h | 1d | |
size/L
release-note-none
kind/cleanup
area/acme
dco-signoff: yes
area/testing
ok-to-test
dependencies
|
contributor-last recv recv-q unreviewed
|
||
| 9485 | |
chore(deps): update cr.kgateway.dev/kgateway-dev/charts/kgateway docker tag to v2.4.7 (master) | 15h | 15h | 15h | |
size/XS
release-note-none
kind/cleanup
dco-signoff: yes
ok-to-test
dependencies
|
contributor-last recv recv-q unreviewed
|
||
| 8480 |  |
feat: add Subject Key Identifier (SKI) to issued certificates |
3
|
8mo | 1d | 8mo |  |
size/L
release-note
kind/feature
dco-signoff: yes
area/testing
ok-to-test
|
commented new-commits recv
|
|
| 9484 |  |
fix(dns01): retry TCP on UDP dial error and continue NS check | 1d | 1d | 1d | |
size/L
release-note
kind/bug
needs-ok-to-test
area/acme
dco-signoff: yes
area/acme/dns01
|
contributor-last recv recv-q unreviewed
|
||
| 9463 |  |
Bound the ACME finalize wait and requeue processing Orders | 4d | 1d | 4d | |
size/L
release-note
kind/bug
needs-ok-to-test
area/acme
dco-signoff: yes
|
recv recv-q unreviewed
|
||
| 9470 | |
chore(deps): update module golang.org/x/net to v0.60.0 [security] (release-1.20) | 4d | 1d | 4d | |
size/L
release-note-none
kind/cleanup
area/acme
dco-signoff: yes
area/testing
ok-to-test
dependencies
skip-review
|
contributor-last recv recv-q unreviewed
|
||
| 9389 |  |
docs(helm): update feature gates list in values.yaml to v1.21.0 | 3wk | 1d | 2d | |
release-note-none
size/S
kind/documentation
dco-signoff: yes
ok-to-test
area/deploy
|
commented recv reviewed-with-comment
|
||
| 9409 |  |
fix(informers): Reject Secret LIST selectors that match unlabelled Secrets |
3
|
16d | 1d | 1d | |
size/L
release-note-none
kind/bug
dco-signoff: yes
tide/merge-method-rebase
|
commented member-last new-commits
|
|
| 9481 |  |
Add spec.deletionPolicy to Certificate to control whether the Secret is deleted with it | 2d | 2d | 2d | |
release-note
area/api
kind/design
kind/feature
needs-ok-to-test
size/XXL
dco-signoff: yes
area/testing
area/deploy
|
contributor-last recv recv-q unreviewed
|
||
| 9480 | |
chore(deps): update ossf/scorecard-action action to v2.5.0 (master) | 2d | 2d | 2d | |
size/XS
release-note-none
kind/cleanup
dco-signoff: yes
ok-to-test
dependencies
|
contributor-last recv recv-q similar unreviewed
|
||
| 9441 |  |
Apply the modernize embedlit fixes | 9d | 3d | 3d | |
release-note
kind/cleanup
size/XXL
area/acme
area/vault
dco-signoff: yes
area/testing
area/acme/dns01
area/acme/http01
|
commented member-last reviewed-with-comment
|
||
| 9469 | |
Add ML-DSA private key support | 4d | 3d | 3d | |
release-note
area/api
kind/design
kind/feature
size/XXL
dco-signoff: yes
area/testing
area/deploy
|
commented member-last new-commits
|
||
| 9461 |  |
Add linux/riscv64 support | 5d | 5d | 5d | |
release-note
kind/feature
needs-ok-to-test
size/M
dco-signoff: yes
|
contributor-last recv recv-q unreviewed
|
||
| 9432 |  |
feat(metrics): Add metrics for dynamically generated serving certificates | 11d | 6d | 11d | |
size/L
release-note
kind/feature
needs-ok-to-test
dco-signoff: yes
area/monitoring
|
new-commits recv recv-q
|
||
| 9428 |  |
Pass the controller's log format to ACME HTTP01 solver pods | 11d | 7d | 11d | |
release-note
kind/feature
needs-ok-to-test
size/M
area/acme
dco-signoff: yes
area/acme/http01
|
contributor-last recv recv-q reviewed-with-comment
|
||
| 8367 |  |
feat(helm) add startupProbe and readinessProbe to cert-manager-controller | 9mo | 7d | 9mo |  |
release-note-none
kind/feature
needs-ok-to-test
size/M
lifecycle/rotten
dco-signoff: yes
area/deploy
|
commented contributor-last recv recv-q unreviewed
|
||
| 8457 |  |
feat(acme): add support for ECDSA account key algorithm in ACME issuers |
3
|
8mo | 8d | 2mo |   |
release-note
size/XL
area/api
kind/feature
area/acme
dco-signoff: yes
area/testing
ok-to-test
area/deploy
|
commented recv recv-q reviewed-with-comment
|
|
| 9405 |  |
feat: add maxPathLen field to Certificate and CertificateRequest APIs | 17d | 10d | 17d | |
release-note
size/XL
area/api
kind/feature
needs-ok-to-test
dco-signoff: yes
area/testing
area/deploy
|
contributor-last recv recv-q unreviewed
|
||
| 9387 | |
Decode metav1.Status in DNS webhook errors | 3wk | 10d | 3wk | |
size/L
release-note
kind/feature
needs-ok-to-test
area/acme
dco-signoff: yes
area/acme/dns01
|
contributor-last recv recv-q unreviewed
|
||
| 9370 | |
Harden CA bundle admission validation to reject invalid PEMs | 4wk | 10d | 4wk |  |
size/L
release-note
area/api
kind/bug
needs-ok-to-test
dco-signoff: yes
area/testing
area/deploy
|
contributor-last pushed-after-approval recv recv-q
|
||
| 9013 |  |
fix(cainjector): add liveness and readiness probes to cainjector deployment | 3mo | 14d | 3mo |  |
release-note
area/api
kind/bug
needs-ok-to-test
size/M
dco-signoff: yes
area/deploy
|
recv recv-q unreviewed
|
||
| 8253 |  |
refactor(issuer): add shared factory and per-instance registries | 11mo | 15d | 3mo | |
size/L
release-note-none
kind/cleanup
dco-signoff: yes
ok-to-test
|
commented contributor-last new-commits recv recv-q
|
||
| 9056 |  |
fix: don't count terminating HTTP01 solver pods when deciding to create/clean up |
| 2mo | 16d | 7wk | |
release-note
kind/bug
size/M
area/acme
dco-signoff: yes
ok-to-test
area/acme/http01
|
assigned assignee-updated commented contributor-last new-commits recv recv-q
|
|
| 9404 |  |
fix(requestmanager): wait for a deleted CertificateRequest to be released | 17d | 17d | 17d | |
size/L
release-note
kind/bug
needs-ok-to-test
dco-signoff: yes
area/testing
|
contributor-last recv recv-q unreviewed
|
||
| 9330 | |
fix(logging): scope the related-resource logger to one loop iteration | 5wk | 17d | 5wk | |
size/XS
release-note
kind/bug
needs-ok-to-test
dco-signoff: yes
|
contributor-last recv recv-q unreviewed
|
||
| 9369 |  |
test: resolve data races in certificate-shim mockWorkqueue | 4wk | 3wk | 4wk | |
release-note-none
size/S
needs-ok-to-test
dco-signoff: yes
kind/flake
|
recv recv-q unreviewed
|
||
| 5743 | |
Add MaxPathLen and add EncodeBasicConstraintsInRequest option to Certificate and CertificateRequest resources | 3y | 4wk | 7mo | |
size/L
release-note
area/api
kind/cleanup
lifecycle/stale
dco-signoff: yes
area/testing
ok-to-test
area/deploy
|
commented contributor-last reviewed-with-comment
|
||
| 8262 |  |
Bugfix #7388 kid missing issue with Infisical ACME server or any other ACME that requires EAB |
|
11mo | 4wk | 10mo |  |
size/L
release-note
needs-ok-to-test
area/acme
lifecycle/rotten
dco-signoff: yes
needs-kind
|
commented contributor-last recv unreviewed
|
|
| 8722 |  |
fix(dns): propagate caBundle to acmeDNS solver, add per-solver override |
|
6mo | 4wk | 6mo |    |
release-note
area/api
kind/bug
kind/feature
needs-ok-to-test
size/XXL
area/acme
dco-signoff: yes
area/acme/dns01
area/deploy
|
recv recv-q unreviewed
|
|
| 9353 |  |
fix(acme): fail over between HTTP-01 self check nameservers | 4wk | 4wk | 4wk | |
size/L
release-note
kind/bug
needs-ok-to-test
area/acme
dco-signoff: yes
area/acme/http01
|
contributor-last recv recv-q unreviewed
|
||
| 8395 |  |
Clarify code around DNS01 Self Check | 9mo | 4wk | 7mo |  |
release-note-none
kind/cleanup
size/M
area/acme
dco-signoff: yes
ok-to-test
area/acme/dns01
|
commented new-commits recv recv-q
|
||
| 9349 |  |
test: exercise the filtered Secret lister in integration tests | 4wk | 4wk | 4wk | |
size/L
release-note-none
needs-ok-to-test
dco-signoff: yes
area/testing
needs-kind
|
contributor-last recv recv-q unreviewed
|
||
| 9305 | |
fix(webhook): validate that renewal windows are reachable within the certificate lifetime | 5wk | 9d | 5wk | |
size/L
release-note
kind/bug
needs-ok-to-test
dco-signoff: yes
|
commented recv recv-q unreviewed
|
||
| 8935 |  |
feat(metrics): instrument Vault issuer Sign() requests | 3mo | 5wk | 3mo | |
release-note
kind/feature
needs-ok-to-test
size/M
area/vault
dco-signoff: yes
area/monitoring
|
recv recv-q similar unreviewed
|
||
| 9285 | |
Add design: publish the ACME webhook API as its own Go module | 6wk | 6wk | |
size/L
release-note-none
kind/design
dco-signoff: yes
|
contributor-last recv-q unreviewed
|
|||
| 9245 | |
Run dynamic authority tests in a synctest bubble | 6wk | 6wk | 6wk | |
release-note-none
size/S
dco-signoff: yes
kind/flake
|
commented member-last reviewed-with-comment
|
||
| 9241 | |
Recover DynamicAuthority when the CA Secret create race is lost | 6wk | 6wk | 6wk | |
release-note
kind/bug
size/M
dco-signoff: yes
kind/flake
|
commented member-last reviewed-with-comment
|
||
| 9243 | |
Deflake TestDynamicAuthority | 6wk | 6wk | |
release-note-none
size/S
kind/cleanup
dco-signoff: yes
|
contributor-last recv-q unreviewed
|
|||
| 8837 |  |
reject negative arcs in ParseObjectIdentifier | 4mo | 7wk | 7wk | |
release-note
kind/bug
needs-ok-to-test
size/M
dco-signoff: yes
|
commented recv reviewed-with-comment
|
||
| 8844 | |
reject non-context-specific GeneralName class in UnmarshalSANs | 4mo | 7wk | 4mo | |
release-note-none
needs-ok-to-test
size/M
dco-signoff: yes
needs-kind
|
new-commits recv recv-q
|
||
| 8712 |  |
feat(metrics): add Vault Sign() request duration instrumentation | 6mo | 5d | 6mo | |
size/L
release-note
kind/feature
needs-ok-to-test
dco-signoff: yes
area/monitoring
|
contributor-last recv recv-q similar unreviewed
|
||
| 9110 | |
Route53: assume the role lazily so the AWS SDK can refresh STS credentials | 2mo | 2mo | 2mo | |
size/L
release-note
kind/bug
area/acme
dco-signoff: yes
area/acme/dns01
|
commented member-last reviewed-with-comment
|
||
| 9045 |  |
Fix CertificateRequest approval event reason | 3mo | 3mo | 3mo | |
size/XS
release-note
kind/bug
needs-ok-to-test
dco-signoff: yes
|
contributor-last recv recv-q similar unreviewed
|
||
| 9030 |  |
feat: validate owner reference | 3mo | 3mo | 3mo | |
size/L
release-note
kind/feature
needs-ok-to-test
dco-signoff: yes
|
contributor-last recv recv-q unreviewed
|
||
| 8968 |  |
fix(acmeorders): reschedule Order when concurrent finalize returns 403 with processing ACME order | 3mo | 3mo | 3mo |  |
release-note
kind/bug
needs-ok-to-test
size/M
area/acme
dco-signoff: yes
|
new-commits recv recv-q
|
||
| 8896 | |
Helm toggle features | 4mo | 4mo | 4mo | |
size/L
release-note
kind/feature
needs-ok-to-test
dco-signoff: yes
area/deploy
|
contributor-last recv recv-q unreviewed
|
||
| 8892 |  |
add renderMode options for prometheus monitors | 4mo | 4mo | 4mo | |
release-note
kind/feature
needs-ok-to-test
size/M
dco-signoff: yes
area/deploy
|
commented recv unreviewed
|
||
| 8846 |  |
fix(selector/dns): normalize dns name before comparing | 4mo | 4mo | 4mo | |
release-note-none
size/S
kind/bug
needs-ok-to-test
area/acme
dco-signoff: yes
|
contributor-last recv recv-q unreviewed
|
||
| 8838 |  |
Add support for GN and SN in LiteralSubject | 4mo | 4mo | 4mo | |
release-note
size/S
kind/feature
needs-ok-to-test
dco-signoff: yes
|
contributor-last recv recv-q unreviewed
|
||
| 8687 |  |
Normalize challenge reason in certmanager_certificate_challenge_status metric |
|
6mo | 5mo | 6mo | |
size/L
release-note-none
needs-ok-to-test
dco-signoff: yes
needs-kind
|
recv recv-q reviewed-with-comment
|
|
| 2332 | |
Document ML-DSA (post-quantum) private keys | 2d | 2d |  |
dco-signoff: yes
size/XL
|
recv-q unreviewed
|
|||
| 2258 |  |
docs: add certforge-issuer to external issuers list | 6wk | 4d | 6wk | |
size/XS
dco-signoff: yes
|
commented recv similar unreviewed
|
||
| 2329 |  |
docs: fix broken anchor links | 4d | 4d | 4d | |
dco-signoff: yes
size/M
|
recv recv-q unreviewed
|
||
| 2330 | |
chore(deps): update misc npm packages | 3d | 3h | 3d | |
dco-signoff: yes
size/XL
ok-to-test
dependencies
|
recv recv-q unreviewed
|
||
| 2306 |  |
docs: fix broken ServiceAccount anchor and several typos | 19d | 13d | 19d | |
dco-signoff: yes
size/S
|
recv recv-q unreviewed
|
||
| 2290 |  |
docs: add scep-issuer to external issuers list | 4wk | 14d | 4wk | |
size/XS
dco-signoff: yes
|
recv recv-q similar unreviewed
|
||
| 2307 |  |
Update Command and EJBCA Issuers to Tier 1 | 17d | 17d | 17d | |
size/XS
dco-signoff: yes
|
recv recv-q unreviewed
|
||
| 2284 |  |
docs: fix 'an the Certificate' typo in rotationPolicy note | 4wk | 3wk | 4wk | |
size/XS
dco-signoff: yes
|
recv recv-q unreviewed
|
||
| 2277 | |
chore(deps): update mcr.microsoft.com/devcontainers/javascript-node docker tag to v26 | 5wk | 3wk | 5wk | |
size/XS
dco-signoff: yes
ok-to-test
dependencies
|
recv recv-q unreviewed
|
||
| 2289 |  |
docs: catalog cert-manager Prometheus metrics | 4wk | 4wk | 4wk | |
dco-signoff: yes
size/S
|
recv recv-q unreviewed
|
||
| 2260 | |
Add an availability and denial of service section to the threat model | 6wk | 6wk | |
dco-signoff: yes
size/M
|
recv-q unreviewed
|
|||
| 2239 |  |
Add cmp-issuer to external issuers list | 7wk | 6wk | 7wk | |
size/XS
dco-signoff: yes
|
recv recv-q similar unreviewed
|
||
| 2256 |  |
docs: correct the Gateway API version requirement | 6wk | 6wk | 6wk | |
dco-signoff: yes
size/M
|
recv recv-q unreviewed
|
||
| 2257 | |
docs: document the Vault issuer caBundleSecretRef field | 6wk | 6wk | 6wk | |
dco-signoff: yes
size/M
|
contributor-last recv recv-q reviewed-with-comment
|
||
| 2212 |  |
docs: explain installing cert-manager into a different namespace | 2mo | 2mo | 2mo | |
dco-signoff: yes
size/S
|
recv recv-q similar unreviewed
|
||
| 2211 | |
docs: clarify the webhook --enable-client-verification flag description | 2mo | 2mo | 2mo | |
size/XS
dco-signoff: yes
|
recv recv-q unreviewed
|
||
| 2188 | |
docs: rename tutorial 'Securing NGINX-ingress' to 'Securing ingress-nginx' | 3mo | 3mo | 3mo | |
size/XS
dco-signoff: yes
|
recv recv-q unreviewed
|
||
| 2166 | |
netlify: document deploy-preview security for forked pull requests | 4mo | 4mo | 4mo | |
dco-signoff: yes
size/S
|
commented member-last reviewed-with-comment
|
||
| 2092 |  |
docs: add infomaniak third party provider | 5mo | 4mo | 5mo | |
size/XS
dco-signoff: yes
|
recv recv-q reviewed-with-comment
|
||
| 2160 | |
docs: document the cert-manager.io/secret-template ingress annotation | 4mo | 4mo | 4mo | |
size/XS
dco-signoff: yes
|
recv recv-q unreviewed
|
||
| 2159 | |
docs: use stringData in the DigitalOcean DNS01 Secret example | 4mo | 4mo | 4mo | |
dco-signoff: yes
size/S
|
recv recv-q unreviewed
|
||
| 1602 |  |
acme troubleshooting: how to fix errored challenges | 2y | 7mo | 2y | |
size/XS
dco-signoff: yes
|
contributor-last recv recv-q reviewed-with-comment
|
||
| 1587 |  |
Custom Certificate Support for cert-manager Webhook Endpoint | 2y | 7mo | 2y | |
dco-signoff: yes
size/S
|
recv recv-q unreviewed
|
||
| 376 | |
Embed cloudbuild.yaml in cmrel so releases need no checkout | 5wk | 5wk | |
dco-signoff: yes
size/L
|
contributor-last recv-q unreviewed
|
|||
| 401 | |
fix(deps): update module google.golang.org/api to v0.303.0 | 1d | 15h | 1d | |
dco-signoff: yes
size/M
dependencies
ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 329 | |
Add script to ping PR authors and issue reporters after a release | 3mo | 5wk | |
dco-signoff: yes
size/L
|
contributor-last recv-q unreviewed
|
|||
| 890 | |
Expand RELEASE.md with the full v0.17.0 release process | 2mo | 2mo | |
dco-signoff: yes
size/L
|
contributor-last recv-q unreviewed
|
|||
| 903 |  |
fix(istiodcert): name the DNS name that failed validation | 7wk | 7wk | 7wk |  |
dco-signoff: yes
size/L
needs-ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 852 |  |
Replace Istio log package with structured logr in auth.go | 3mo | 3mo | 3mo | |
dco-signoff: yes
size/XS
needs-ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 860 | |
feat(chart): expose automountServiceAccountToken in the istio-csr chart | 3mo | 3mo | 3mo | |
dco-signoff: yes
size/S
needs-ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 1053 |  |
fix: Make policy readiness generation-aware | 8d | 8d | 8d | |
dco-signoff: yes
size/L
needs-ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 976 | |
feat: add startupapicheck Job to verify webhook readiness | 2mo | 5wk | 2mo | |
dco-signoff: yes
needs-ok-to-test
size/XL
|
recv recv-q similar unreviewed
|
||
| 1131 | |
fix(deps): update module software.sslmate.com/src/go-pkcs12 to v0.7.4 | 3d | 3d | 3d | |
dco-signoff: yes
size/XS
ok-to-test
dependencies
|
contributor-last recv recv-q unreviewed
|
||
| 958 |  |
feat: add startupapicheck job to ensure webhook readiness on install | 5mo | 10d | 5mo |  |
dco-signoff: yes
needs-ok-to-test
size/XL
|
recv recv-q similar unreviewed
|
||
| 1121 |  |
Add usage and fqdn for webhook tls certificate | 16d | 11d | 13d | |
dco-signoff: yes
size/M
needs-ok-to-test
|
commented contributor-last new-commits recv
|
||
| 508 | |
Fix certificaterequest denial status | 7wk | 7wk | 7wk | |
kind/bug
dco-signoff: yes
size/M
needs-ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 188 | |
Remove SetCertificateRequestConditionError |
3
|
2y | 7mo | 7mo | |
dco-signoff: yes
size/XXL
|
commented member-last new-commits
|
|
| 783 | |
fix(deps): update module software.sslmate.com/src/go-pkcs12 to v0.7.4 | 3d | 3d | 3d | |
dco-signoff: yes
size/XS
ok-to-test
dependencies
|
contributor-last recv recv-q unreviewed
|
||
| 672 | |
feat(chart): make pod and sidecar securityContext configurable | 4mo | 4mo | 4mo | |
dco-signoff: yes
size/L
needs-ok-to-test
|
commented recv unreviewed
|
||
| 700 | |
feat(chart): expose automountServiceAccountToken in the csi-driver chart | 3mo | 3mo | 3mo | |
dco-signoff: yes
size/S
needs-ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 641 |  |
fix(chart): propagate the csi-data-dir mount so volumes survive driver restarts | 3d | 2d | 3d | |
kind/bug
dco-signoff: yes
size/XS
needs-ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 594 | |
fix(driver): return an error instead of panicking on a non-PEM issued chain | 7wk | 5wk | 7wk | |
dco-signoff: yes
size/L
needs-ok-to-test
|
contributor-last recv recv-q reviewed-with-comment similar
|
||
| 564 | |
feat(chart): expose automountServiceAccountToken in the csi-driver-spiffe chart | 3mo | 3mo | 3mo | |
dco-signoff: yes
size/S
needs-ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 538 | |
feat(chart): make pod and sidecar securityContext configurable | 4mo | 4mo | 4mo | |
dco-signoff: yes
size/L
ok-to-test
|
commented new-commits recv
|
||
| 148 |  |
limit-namespaces for namespace-scope deployments |
|
2y | 6mo | 2y |  |
dco-signoff: no
size/S
needs-ok-to-test
|
contributor-last recv recv-q unreviewed
|
|
| 303 |  |
feat: add support for setting private key encoding | 10mo | 9mo | 10mo | |
dco-signoff: yes
size/L
needs-ok-to-test
|
recv recv-q reviewed-with-comment
|
||
| 223 |  |
NodePublishSecretRef | 5mo | 5mo | 5mo | |
dco-signoff: no
size/L
needs-ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 211 |  |
Fix: concurrent NodePublishVolume calls could mount volume without certificates | 5mo | 5mo | 5mo | |
dco-signoff: yes
size/L
needs-ok-to-test
|
contributor-last recv recv-q unreviewed
|
||
| 71 | |
Refactor filesystem.go and adapt tests to use a real file system | 2y | 1y | 1y | |
dco-signoff: yes
size/L
|
commented member-last reviewed-with-comment
|
||
| 236 | |
chore(deps): update docker.io/golang:1.27.2 docker digest to 8201530 | 11h | 11h | 11h | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 88 | |
chore(deps): update terraform google to v7.46.1 | 4mo | 5wk | 4mo | |
dco-signoff: yes
size/L
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 90 | |
chore(deps): update terraform google to v8 | 7wk | 15h | 7wk | |
dco-signoff: yes
size/L
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 1241 | |
Set memory limits equal to requests for generated Prow jobs | 7d | 7d | |
dco-signoff: yes
size/XL
|
contributor-last recv-q unreviewed
|
|||
| 1236 |  |
Update k8s-infra-prow images, k8s-staging-test-infra images as needed | 5wk | 16h | 5wk | |
dco-signoff: yes
size/M
|
contributor-last recv recv-q unreviewed
|
||
| 1238 | |
Add presubmit job for community Prow Peribolos dry-run | 2wk | 2wk | |
dco-signoff: yes
size/S
|
contributor-last recv-q unreviewed
|
|||
| 778 | |
chore(deps): update tools | 5d | 2h | 5d | |
dco-signoff: yes
size/M
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 777 | |
chore(deps): update renovate/renovate docker tag to v44.156.3 | 5d | 3h | 5d | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 688 | |
oci-build: add oci-security-scan target and scheduled workflow | 2mo | 7d | 4wk | |
dco-signoff: yes
size/L
|
commented member-last reviewed-with-comment
|
||
| 723 | |
feat: add make target to upload SBOMs to GitHub releases | 6wk | 5wk | 6wk | |
dco-signoff: yes
size/S
|
recv recv-q reviewed-with-comment
|
||
| 655 | |
Fix 'make verify' command | 3mo | 3mo | 3mo | |
dco-signoff: yes
size/XS
|
commented member-last reviewed-with-comment
|
||
| 55 | |
feat: add test module | 2y | 2y | 2y | |
dco-signoff: yes
size/M
|
commented contributor-last recv reviewed-with-comment
|
||
| 346 | |
Nest commented-out properties at the end of the file under their parent | 5wk | 5wk | |
dco-signoff: yes
size/M
|
contributor-last recv-q reviewed-with-comment
|
|||
| 344 | |
Add help descriptions to the root, schema and lint commands | 5wk | 5wk | |
dco-signoff: yes
size/S
|
contributor-last recv-q reviewed-with-comment
|
|||
| 345 | |
Keep "WARNING:" labels on their own line and join lines that open with a bracket | 5wk | 5wk | |
dco-signoff: yes
size/M
|
contributor-last recv-q reviewed-with-comment
|
|||
| 343 | |
Honour +docs:section tags regardless of surrounding blank lines | 5wk | 5wk | |
dco-signoff: yes
size/M
|
contributor-last recv-q reviewed-with-comment
|
|||
| 76 | |
Update the post-quantum cryptography roadmap for ML-DSA | 2d | 2d | |
dco-signoff: yes
size/S
|
contributor-last recv-q unreviewed
|
|||
| 69 | |
Add auditing tool for confirming who has access to the cert-manager org | 7mo | 7mo | |
dco-signoff: yes
size/XL
|
contributor-last recv-q unreviewed
|
|||
| 64 |  |
Add imagePullSecrets to template | 2y | 2mo | 2y | |
size/XS
dco-signoff: yes
needs-ok-to-test
|
contributor-last new-commits recv recv-q
|
||
| 1 | |
Manage the cert-manager GitHub organisation from this repo | 2y | 2y | 2y | |
dco-signoff: yes
size/XXL
|
commented member-last unreviewed
|
||
| 182 | |
chore(deps): update goreleaser/goreleaser-action action to v7.3.0 | 1d | 1d | 1d | |
dco-signoff: yes
size/XS
dependencies
ok-to-test
|
contributor-last recv recv-q similar unreviewed
|
||
| 13 |  |
Various QA fixes | 8mo | 8mo | 8mo | |
dco-signoff: yes
size/L
needs-ok-to-test
|
commented new-commits recv
|
||
| 4 | |
Add support for custom license templates | 3y | 1y | |
dco-signoff: yes
size/S
|
contributor-last recv-q unreviewed
|
|||
| 649 | |
fix(deps): update module google.golang.org/api to v0.303.0 | 1d | 14h | 1d | |
size/M
ok-to-test
dependencies
dco-signoff: yes
|
contributor-last recv recv-q unreviewed
|
||
| 637 |  |
feat: propagate Kubernetes metadata to Google CAS labelsCert manager update labels | 9d | 2d | 2d | |
size/XL
dco-signoff: yes
|
collaborator-last commented unreviewed
|
||
| 141 |  |
re-adding required clusterrole permission | 2y | 2y | 2y | |
size/XS
|
recv unreviewed
|
||
| 641 | |
feat: add fallback CA pool failover support for high availability | 8d | 2d | 2d | |
size/XXL
dco-signoff: yes
|
collaborator-last commented new-commits
|
Unkinded Issues (231)
Resolution: Add a kind/ or triage/support label
Average age: 737.3d, Avg wait: 333.4d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 7699 |  |
Adding Helm Unittest to all certmanager projects |
| 2y | 5mo | 5mo | |
priority/backlog
|
assigned assignee-updated commented member-last send
|
||
| 2333 |  |
[feature request] RSS feed for the Announcements page | 19h | 19h | 19h |
recv
|
|||||
| 1262 | |
v1.9 to v1.10 upgrade instructions does not mention container name change |
| 3y | 2y | 2y | |
priority/backlog
|
assigned assignee-updated commented member-last send
|
||
| 1101 |  |
Feature request for updating documentation. | 4y | 2y | 2y | |
priority/backlog
|
commented member-last send
|
|||
| 320 | |
Document how to install cert-manager using gitops and known issues with particular gitops implementations
|
5
|
6y | 3y | 6y |   |
documentation
help wanted
priority/backlog
|
commented pr-merged recv-q
|
||
| 2 | |
Set up periodic job to publish an experimental release build |
|
|
6y | 4wk | 4wk | |
priority/backlog
|
assigned commented member-last send
|
|
| 45 |  |
Unable to mount and read only file error |
5
|
5y | 3wk | 2y |      |
priority/awaiting-more-evidence
|
commented send
|
||
| 132 | |
Investigate test timeouts | 2y | 2y |
priority/backlog
|
||||||
| 477 |  |
Question: What version we can use for Openshift 4.18 ? | 1d | 1d | 1d |
recv
|
|||||
| 33 | |
Create e2e test to validate CertificateRequest garbage collection |
| 4y | 2y | 2y | |
priority/backlog
|
assigned commented member-last send
|
||
| 81 | |
Configuring Peribolos for Github org management | 8y | 2y | 2y | |
priority/backlog
|
commented member-last send
|
|||
| 3 | |
Migrating all cert-manager projects to "Makefile modules" | 2y | 10mo | 1y | |
priority/backlog
|
commented member-last
|
|||
| 75 | |
KubeCon EU 27: ContribFest, Maintainer Track talk and kiosk | 6d | 6d | |||||||
| 43 | |
Allow non-Venafi employee maintainers full release capabilities |
|
3
|
2y | 10mo | 10mo | |
priority/backlog
|
assigned assignee-updated commented member-last
|
|
| 27 |  |
failed with: OpenAPI spec does not exist
|
2
6
|
5y | 2y | 2y |        |
priority/critical-urgent
|
commented pr-closed pr-unreviewed send
|
||
| 216 previously listed items omitted | |||||||||||
Unprioritized Recent Issues (286)
Resolution: Add a priority/ or triage/ label
Average age: 508.2d, Avg wait: 242.7d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 9458 |  |
Orders controller worker blocks forever in CreateOrderCert/WaitOrder when the ACME order stays processing; recreated Order can never be processed | 6d | 4d | 6d | |
kind/bug
|
pr-unreviewed recv recv-q
|
|||
| 9483 |  |
DNS01 self-check against authoritative nameservers can stall indefinitely on an IPv6-only cluster | 1d | 1d | 1d | |
kind/bug
|
pr-unreviewed recv
|
|||
| 284 previously listed items omitted | |||||||||||
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 4 previously listed items omitted: #9483 #9458 #2333 #477 | |||||||||||
New, has multiple reactions, but not important-soon: No matching items
New, has multiple commenters, but not important-soon: No matching items
needs information, has update (1)
Resolution: Comment and remove triage/needs-information tag
Average age: 383.0d, Avg wait: 378.7d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 8121 | |
Support for Creating CertificateRequest from Kubernetes Secret | 1y | 2mo | 1y | |
kind/feature
triage/needs-information
lifecycle/rotten
|
contributor-last recv recv-q similar
|
Recently updated issue has a question (1)
Resolution: Add an answer
Average age: 6.1d, Avg wait: 5.5d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 9458 | |
Orders controller worker blocks forever in CreateOrderCert/WaitOrder when the ACME order stays processing; recreated Order can never be processed | 6d | 4d | 6d | |
kind/bug
|
pr-unreviewed recv recv-q
|