Issues that may be waiting for our response NOTE: for this to work properly, GitHub token must have read access to read organization members
Questions awaiting follow-up: No matching items
Bugs awaiting follow-up (23)
Resolution: Comment or close the issue
Average age: 453.2d, Avg wait: 269.5d
Features awaiting follow-up (40)
Resolution: Comment or close the issue
Average age: 395.6d, Avg wait: 182.8d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 9445 |  |
Expose certificate processing errors in the Certificate resource status | 8d | 3d | 8d |  |
kind/feature
|
recv
|
||
| 9437 |  |
Vanilla k8s ClusterRole aggregation | 9d | 9d | 9d |
kind/feature
|
pr-reviewed-with-comment recv similar
|
|||
| 9103 |  |
Support gating pod scheduling on driver registration (startup taint removal) | 2mo | 2mo | 2mo |  |
kind/feature
|
recv recv-q
|
||
| 9123 |  |
Automate kubeVersion bump in Chart.template.yaml alongside Kind version updates | 2mo | 18d | 4wk |   |
kind/feature
|
commented recv recv-q
|
||
| 9076 |  |
Auto-renew leaf TLS certificates when CA certificate rotates (SKI/AKI mismatch prevention) | 2mo | 3wk | 2mo |  |
kind/feature
|
contributor-last recv
|
||
| 9085 |  |
Implement per-Certificate Secret deletion policy |
3
|
2mo | 2mo | 2mo |
kind/feature
|
pr-unreviewed recv
|
||
| 9034 |  |
helm chart: add network policy for `startupapicheck` job |
2
|
3mo | 2mo | 3mo |   |
kind/feature
|
pr-reviewed-with-comment recv
|
|
| 8895 |  |
[HELM]: add flag to skip deployment of webhook | 4mo | 4mo | 4mo |
kind/feature
|
pr-unreviewed recv
|
|||
| 8835 |  |
Make signatureAlgorithm configurable | 4mo | 3mo | 4mo |  |
kind/feature
|
recv recv-q
|
||
| 9029 |  |
respect owner references | 3mo | 3mo | 3mo |
kind/feature
|
pr-unreviewed recv
|
|||
| 8763 |  |
Minimize cert-manager and trust-manager Controller Privileges | 5mo | 5mo | 5mo |
kind/feature
|
recv
|
|||
| 8716 |  |
Feature Request: Add a CMPv2 issuer for certificate enrollment and renewal (RFC 4210) | 6mo | 6wk | 6mo |    |
kind/feature
|
commented recv recv-q
|
||
| 8679 |  |
Allow managing SSH-CA | 6mo | 3mo | 6mo |  |
kind/feature
|
recv
|
||
| 8530 |  |
Allow usage of the new DNS-PERSIST-01 challange for ACME |
29
|
7mo | 1mo | 7mo |  |
kind/feature
lifecycle/stale
|
contributor-last recv similar
|
|
| 8441 |  |
Add instrumentation to Vault issuer Sign() operation |
| 8mo | 2mo | 8mo |  |
good first issue
kind/feature
priority/backlog
lifecycle/stale
|
assigned assignee-updated commented contributor-last pr-unreviewed recv recv-q
|
|
| 8402 |  |
ZeroSSL issues all certs with the same hour (yyyy-mm-ddT15:59:59Z) | 9mo | 11d | 6mo |  |
kind/feature
priority/important-longterm
lifecycle/stale
|
commented contributor-last recv
|
||
| 8372 |  |
HTTP-01 challenge: support stateless http-01 challenge | 9mo | 19d | 9mo |
kind/feature
lifecycle/rotten
|
contributor-last recv
|
|||
| 8235 |  |
Cert-manager support for Issuer-managed keys | 11mo | 2mo | 11mo |    |
kind/feature
lifecycle/stale
|
commented recv recv-q
|
||
| 8209 |  |
Add revocation at certificate deletion |
4
|
11mo | 5d | 11mo |   |
kind/feature
|
recv similar
|
|
| 8121 |  |
Support for Creating CertificateRequest from Kubernetes Secret | 1y | 2mo | 1y |  |
kind/feature
triage/needs-information
lifecycle/rotten
|
contributor-last recv recv-q similar
|
||
| 8373 | |
DNS-PERSIST-01 challenge support (planned for late Q1 2026) |
9
4
3
226
|
9mo | 5mo | 9mo |     |
kind/feature
|
recv recv-q similar
|
|
| 7868 |  |
Metrics for webhook certificate |
3
|
1y | 2mo | 1y | |
kind/feature
lifecycle/rotten
|
contributor-last pr-new-commits recv similar
|
|
| 7834 |  |
Provide race condition mitigation support | 1y | 15d | 1y | |
kind/feature
|
pr-new-commits recv
|
||
| 7788 |  |
Be able to default `acme.cert-manager.io/http01-edit-in-place: "true"` behavior in deployment/chart values |
5
|
1y | 4mo | 10mo |   |
kind/feature
|
commented recv
|
|
| 7766 |  |
Certificate: Let me specify the concatenation order for CombinedPEM output format |
|
1y | 7mo | 1y |  |
kind/feature
|
pr-new-commits recv recv-q
|
|
| 7751 |  |
Custom key usage extensions | 1y | 7mo | 8mo |  |
kind/feature
|
commented recv recv-q
|
||
| 7561 |  |
Feature Request RFC: Push notifications from cert-manager to <other service> when certificates are issued | 2y | 5mo | 11mo | |
kind/feature
|
commented recv recv-q
|
||
| 7514 |  |
Replace some of the webhook functionality with `ValidatingAdmissionPolicy` & CEL |
|
2y | 8mo | 1y | |
kind/feature
priority/important-longterm
|
commented recv
|
|
| 7311 |  |
helm schema validation should validate `featureGates` |
|
2y | 9mo | 1y |  |
lifecycle/frozen
kind/feature
priority/backlog
|
commented contributor-last recv
|
|
| 6472 |  |
Create TLSA records automatically |
18
|
2y | 2mo | 2y |      |
kind/feature
priority/backlog
|
pr-reviewed-with-comment recv recv-q
|
|
| 8479 |  |
Subject Key Identifier (SKI) missing on issued certificates by self-signed CA | 8mo | 2mo | 8mo |
kind/feature
lifecycle/stale
|
contributor-last pr-new-commits recv
|
|||
| 5540 |  |
Changelog annotations to chart |
|
4y | 8mo | 4y | |
kind/feature
priority/backlog
|
recv
|
|
| 6010 |  |
Support the ACME Renewal Information (ARI) extension
|
4
5
22
|
3y | 7wk | 1y |      |
lifecycle/frozen
kind/feature
|
commented pr-merged recv recv-q
|
|
| 8458 |  |
Vault approle configuration |
2
|
8mo | 2mo | 8mo |
kind/feature
lifecycle/stale
|
contributor-last recv
|
||
| 8522 |  |
Support pulling additional fields from secret when using external account binding |
2
|
8mo | 1mo | 8mo |  |
kind/feature
lifecycle/stale
|
contributor-last recv recv-q
|
|
| 3706 |  |
renewal-hooks |
4
3
23
|
5y | 4mo | 4mo |       |
kind/feature
priority/important-longterm
lifecycle/rotten
|
commented pr-reviewed-with-comment recv recv-q
|
|
| 1098 |  |
Feature Request: Opt-in mutating webhook to inject trust bundles into Pods via annotations | 5wk | 5wk | 5wk |
kind/feature
|
recv
|
|||
| 886 |  |
Allow creating `ClusterRole` aggregations
|
8mo | 2mo | 8mo |
kind/feature
lifecycle/stale
|
contributor-last pr-merged recv similar
|
|||
| 742 |  |
Add option to disable webhook in Helm chart
|
1y | 4mo | 1y | |
kind/feature
|
commented pr-closed recv
|
||
| 306 |  |
[FEATURE]Enable setting private key encoding via annotation | 10mo | 10mo | 10mo | |
kind/feature
|
pr-reviewed-with-comment recv
|
Items that deserve a follow-up comment: No matching items