Issues that may be waiting for our response
NOTE: for this to work properly, GitHub token must have read access to read organization members
Questions awaiting follow-up: No matching items

Bugs awaiting follow-up (29)

Resolution: Comment or close the issue

Average age: 475.9d, Avg wait: 261.8d
ID Au Desc As Rea Cr Up Re Cmntrs Labels Tags
8493 cloudflare DNS01 - Client.Timeout exceeded while awaiting headers
2
6d 20min 6d
kind/bug
recv
8476 Helm chart defaults leaderElection namespace to kube-system, blocking cert-manager controller and certificate creation 10d 10d 10d
kind/bug
author-last
commented
recv
recv-q
8095 DNS-01 Delegated zone is not following CNAME and creating wrong records
4
4mo 3mo 4mo
kind/bug
author-last
recv
recv-q
8086 ACME ClusterIssuer not recovering after Vault restart 5mo 5mo 5mo
kind/bug
recv
8058 Cert-manager fails to import ECDSA private keys generated by openssl 5mo 4mo 5mo
kind/bug
priority/important-longterm
pr-changes-requested
recv
7864 failed to call webhook: certificate has expired or is not yet valid
2
7mo 5wk 7mo
kind/bug
assigned
assignee-updated
contributor-last
recv
recv-q
similar
7862 Requesting a certificate from ZeroSSL sometimes takes more than 10 minutes to complete
7
7mo 4mo 7mo
kind/bug
recv
7846 ClusterIssuer.Status.Acme.URI disappeared
7mo 4mo 7mo
good first issue
kind/bug
priority/awaiting-more-evidence
area/acme
triage/needs-information
assigned
assignee-updated
contributor-last
recv
recv-q
7845 ClusterIssuer.cert-manager.io "letsencrypt" is invalid: spec.acme.privateKeySecretRef: Required value...
6
7mo 4mo 7mo
kind/bug
priority/awaiting-more-evidence
area/acme
triage/needs-information
contributor-last
recv
recv-q
7826 If issuer is incorrect, it is still shown as READY 7mo 3mo 7mo
kind/bug
priority/important-longterm
assigned
assignee-updated
author-last
pr-new-commits
recv
recv-q
7768 Stuck in a loop with `multiple challenge solver pods found for challenge` 8mo 2mo 8mo
kind/bug
author-last
recv
7765 Propagation tests fails when using IPv6 recursive DNS nameservers
8mo 2mo 8mo
kind/bug
lifecycle/stale
contributor-last
recv
7760 Is the zone responsible for a domain changes, cert-manager will not pick it up 9mo 2mo 9mo
kind/bug
lifecycle/stale
contributor-last
recv
7660 cert-manager produces invalid (per RFC5280) certificates when `cert sign` usage is set along with another usage 10mo 4d 10mo
kind/bug
lifecycle/rotten
contributor-last
recv
recv-q
7649 [GKE][Cert-Manager]Document Might Need Implementation Details Update to GSA/KSA Integration 10mo 2mo 10mo
kind/bug
lifecycle/stale
contributor-last
recv
recv-q
7625 Clean install fails to create Issuer
4
11mo 2wk 11mo
kind/bug
lifecycle/rotten
contributor-last
recv
recv-q
7594 Cloudflare delegated domains returns Found no Zones for domain _acme-challenge.mydomain.com
11mo 19d 11mo
kind/bug
lifecycle/rotten
contributor-last
recv
7522 Non standard "cert-manager.io" used in event "Reason" 1y 3mo 9mo
lifecycle/frozen
kind/bug
commented
contributor-last
recv
7486 `"Unhandled Error" err="ingress '...' in work queue no longer exists"` should be handled (clean up dangling `Certificate`)
6
1y 3mo 1y
lifecycle/frozen
kind/bug
contributor-last
recv
recv-q
7438 certificate not updated after enabling SSA 1y 2mo 1y
kind/bug
author-last
recv
7288 Missing UID in webhook challenge request 1y 3d 1y
kind/bug
priority/backlog
lifecycle/rotten
contributor-last
recv
7234 AWS Route53: Stale/Stuck Challenges should be deleted after a given timeout
4
2y 2mo 1y
kind/bug
priority/important-soon
assigned
assignee-updated
commented
contributor-last
open-milestone
pr-closed
pr-merged
pr-new-commits
recv
recv-q
6741 ACME account private key and URI are not updated if the path of the ACME server is changed
7
2y 2mo 2y
lifecycle/frozen
kind/bug
priority/important-soon
recv
5917 Waiting for DNS-01 challenge propagation: DNS record for mydomain.com not yet propagated
42
2y 9d 2y
kind/bug
priority/important-longterm
assigned
assignee-updated
recv
recv-q
7388 Kid missing in the new order request
2
1y 3mo 1y
kind/bug
pr-unreviewed
recv
recv-q
5751 Wildcard DNS domains and `cnameStrategy: Follow` don't work nicely together
3y 3mo 3y
lifecycle/frozen
kind/bug
priority/important-soon
author-last
pr-unreviewed
recv
recv-q
4749 rfc2136 seems to not work with deep subdomains
4y 3mo 4y
kind/bug
area/acme/dns01
recv
recv-q
5048 certificate not renewed for ingress with multiple hosts and http01-edit-in-place
4
3y 2mo 3y
kind/bug
priority/backlog
lifecycle/stale
commented
contributor-last
recv
recv-q
4685 Unexpected EOF during watch stream event decoding: unexpected EOF -- possibly due to api server upgrades / restarts
12
4y 4mo 4mo
lifecycle/frozen
kind/bug
priority/important-longterm
commented
contributor-last
recv

Features awaiting follow-up (38)

Resolution: Comment or close the issue

Average age: 330.7d, Avg wait: 116.2d
ID Au Desc As Rea Cr Up Re Cmntrs Labels Tags
8499 Add custom labels to be exposed in prometheus metrics 4d 4d 4d
kind/feature
author-last
recv
8479 Subject Key Identifier (SKI) missing on issued certificates by self-signed CA 10d 10d 10d
kind/feature
pr-new-commits
recv
8458 Vault approle configuration 15d 15d 15d
kind/feature
recv
8441 Add instrumentation to Vault issuer Sign() operation 3wk 5d 16d
good first issue
kind/feature
priority/backlog
assigned
assignee-updated
commented
contributor-last
pr-unreviewed
recv
recv-q
8378 Support `PodCertificateRequest`
6wk 5wk 6wk
kind/feature
contributor-last
recv
recv-q
similar
8373 DNS-PERSIST-01 challenge support (planned for 2026)
2
6wk 4wk 6wk
kind/feature
author-last
recv
8372 HTTP-01 challenge: support stateless http-01 challenge 6wk 6wk 6wk
kind/feature
recv
8363 helm: Set `ttlSecondsAfterFinished` on Jobs 7wk 8d 9d
good first issue
kind/feature
commented
contributor-last
recv
8352 Add AWS, GCP, and Azure Authentication Methods for Vault Issuer 1mo 3wk 5wk
kind/feature
priority/backlog
area/vault
commented
pr-reviewed-with-comment
recv
recv-q
8235 Cert-manager support for Issuer-managed keys 3mo 3mo 3mo
kind/feature
author-last
commented
recv
8209 Add revocation at certificate deletion
3
3mo 3mo 3mo
kind/feature
recv
similar
8194 Update e2e Documentation - for the make e2e-setup command 3mo 3mo 3mo
kind/feature
contributor-last
recv
8121 Support for Creating CertificateRequest from Kubernetes Secret 4mo 3mo 4mo
kind/feature
triage/needs-information
contributor-last
recv
recv-q
similar
7914 Output tls.crt in CA cert to another secret 6mo 4d 6mo
kind/feature
lifecycle/stale
contributor-last
recv
7879 Remove no-op certificate metrics controller 6mo 4mo 6mo
kind/feature
priority/backlog
assigned
assignee-updated
recv
7868 Metrics for webhook certificate
3
6mo 3mo 6mo
kind/feature
author-last
recv
7834 Provide race condition mitigation support 7mo 6wk 7mo
kind/feature
author-last
recv
7817 Support `global.nodeSelector` in the Helm chart
2
8mo 3mo 8mo
kind/feature
contributor-last
pr-merged
recv
7788 Be able to default `acme.cert-manager.io/http01-edit-in-place: "true"` behavior in deployment/chart values
4
8mo 2mo 8mo
kind/feature
contributor-last
recv
recv-q
7772 Reviewing the use of https://github.com/SSLMate/go-pkcs12 8mo 2mo 8mo
kind/feature
lifecycle/stale
contributor-last
recv
recv-q
7766 Certificate: Let me specify the concatenation order for CombinedPEM output format
8mo 2mo 8mo
kind/feature
lifecycle/stale
contributor-last
recv
recv-q
7747 [suggestion] Add Kustomize install documentation
3
4
9mo 5mo 9mo
kind/feature
commented
recv
recv-q
7684 Add support for namespaced deployment
10mo 5wk 10mo
kind/feature
lifecycle/stale
contributor-last
pr-merged
recv
recv-q
similar
7561 Feature Request RFC: Push notifications from cert-manager to <other service> when certificates are issued 1y 3mo 3mo
kind/feature
author-last
commented
recv
recv-q
7536 Digicert ACME order is failing due to invalid validity_years 1y 5wk 2mo
good first issue
lifecycle/frozen
kind/feature
priority/backlog
area/acme
author-last
commented
recv
7514 Replace some of the webhook functionality with `ValidatingAdmissionPolicy` & CEL
1y 1d 6mo
kind/feature
priority/important-longterm
author-last
commented
recv
7510 Key Size for Acme Account Key
1y 2mo 1y
kind/feature
lifecycle/stale
contributor-last
pr-new-commits
recv
7422 Please provide standalone helm chart for CRDs
19
1y 5mo 1y
kind/feature
recv
7311 helm schema validation should validate `featureGates`
1y 4wk 8mo
lifecycle/frozen
kind/feature
priority/backlog
commented
contributor-last
recv
7184 Helm chart: add ability to add appprotocol to port in service
3
2y 2mo 1y
good first issue
kind/feature
priority/backlog
lifecycle/stale
commented
contributor-last
pr-reviewed-with-comment
recv
recv-q
6662 support overriding of ttl in cloudflare
2
2y 2mo 1y
kind/feature
priority/backlog
author-last
commented
recv
6472 Create TLSA records automatically
15
2y 18d 2y
kind/feature
priority/backlog
contributor-last
recv
6010 Support the ACME Renewal Information (ARI) extension
12
2y 2mo 8mo
kind/feature
author-last
commented
recv
recv-q
5540 Changelog annotations to chart
3y 9d 3y
kind/feature
priority/backlog
author-last
recv
2478 Allow CA issuer secret rotation
2
71
6y 2mo 1y
kind/feature
priority/important-longterm
area/ca
commented
contributor-last
recv
886 Allow creating `ClusterRole` aggregations 1d 1d 1d
kind/feature
recv
742 Add option to disable webhook in Helm chart 5mo 2mo 5mo
kind/feature
author-last
commented
recv
306 [FEATURE]Enable setting private key encoding via annotation 2mo 2mo 2mo
kind/feature
author-last
pr-reviewed-with-comment
recv
Items that deserve a follow-up comment: No matching items
Triage Party v1.4.0