Once every quarter, look for stale issues, reprioritize, and de-duplicate.
Issues nearing expiration (23)
Resolution: Close or label as frozen
Average age: 391.2d, Avg wait: 167.3d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 7610 |  |
Expose MaxFailures as a helm paramater for FileCertificateSource | 3mo | 8d | 3mo |
kind/feature
lifecycle/stale
|
contributor-last recv
|
|||
| 7590 | |
Allow issuer fallback |
|
3mo | 18d | 3mo |
lifecycle/stale
|
contributor-last recv
|
||
| 7587 |  |
Spaceship support | 3mo | 2wk | 3mo |  |
lifecycle/stale
|
contributor-last recv recv-q
|
||
| 7585 |  |
Continuous access token requests when using Venafi TPP password/username authentication | 3mo | 3wk | 3mo |
kind/bug
lifecycle/stale
|
contributor-last recv
|
|||
| 7581 |  |
Cert-manager is no longer triggered when multiple tls.hosts exists without secretName. | 3mo | 3wk | 3mo |
kind/bug
lifecycle/stale
|
contributor-last recv
|
|||
| 7580 |  |
CNameStrategy Follow not working with Cloudflare | 3mo | 2wk | 3mo |  |
lifecycle/stale
|
contributor-last recv
|
||
| 7586 | |
BookMyName support | 3mo | 2wk | 3mo | |
lifecycle/stale
|
contributor-last recv recv-q
|
||
| 7463 |  |
Set "ownerReference" for generated Secret via Go-SDK | 6mo | 16d | 6mo |  |
lifecycle/stale
|
contributor-last recv recv-q
|
||
| 7385 |  |
Failed calling webhook "webhook.cert-manager.io": Forbidden | 7mo | 4d | 7mo |   |
kind/bug
lifecycle/stale
|
contributor-last recv recv-q
|
||
| 7311 |  |
helm schema validation should validate `featureGates` |
|
8mo | 1d | 8mo |   |
kind/feature
priority/backlog
lifecycle/stale
|
contributor-last recv recv-q
|
|
| 7301 |  |
Metrics for updated / patched certificates should be cleaned |
|
8mo | 4d | 8mo |  |
kind/bug
priority/awaiting-more-evidence
lifecycle/stale
|
contributor-last recv recv-q
|
|
| 7578 | |
cert-manager should not use domains it doesn't control
|
3mo | 3wk | 3mo | |
lifecycle/stale
|
contributor-last pr-unreviewed recv
|
||
| 7156 |  |
Consider exposing previous certificates/keys in the kubernetes secret so that workloads can implement a grace period when a certificate rotates |
8
|
11mo | 3wk | 11mo |   |
kind/feature
priority/backlog
lifecycle/stale
|
contributor-last recv
|
|
| 7002 |  |
Confusing messaging when certificate secret name already exist |
| 1y | 6h | 3mo |   |
good first issue
help wanted
kind/bug
priority/backlog
lifecycle/stale
|
assigned assignee-updated commented contributor-last recv-q send
|
|
| 7012 |  |
Feature Request: Add support to set future date as notBefore when requesting for certificate | 1y | 3d | 9mo |   |
kind/feature
priority/backlog
lifecycle/stale
|
commented contributor-last pr-reviewed-with-comment recv
|
||
| 6229 |  |
Race condition when two identical certificate requests are made from different clusters
|
7
|
2y | 2wk | 2y |      |
help wanted
kind/bug
priority/important-longterm
lifecycle/stale
area/acme/dns01
|
contributor-last pr-merged recv recv-q
|
|
| 6051 |  |
Detecting Gateway hostnames based on attached HTTPRoutes
|
3
24
|
2y | 2d | 2y |        |
kind/feature
priority/important-longterm
lifecycle/stale
|
pr-merged recv recv-q
|
|
| 6179 |  |
CRDs shouldn't be templated in Helm |
5
28
|
2y | 3wk | 2y |          |
priority/backlog
lifecycle/stale
|
commented contributor-last recv recv-q
|
|
| 2722 |  |
Inject CA certificate into Secrets with cainjector | 26
|
5y | 19d | 3y |         |
kind/feature
priority/awaiting-more-evidence
lifecycle/stale
|
commented contributor-last recv-q send
|
|
| 7614 |  |
Lower the minimum certificate duration from 1 hour to 5 minutes | 3mo | 8d | 3mo | |
release-note
size/S
area/api
kind/feature
needs-ok-to-test
lifecycle/stale
dco-signoff: yes
|
contributor-last recv recv-q unreviewed
|
||
| 7608 |  |
WIP: certificate based on HTTPRoute design document | 3mo | 10d | 3mo | |
size/L
release-note-none
do-not-merge/work-in-progress
kind/design
needs-ok-to-test
lifecycle/stale
dco-signoff: yes
|
contributor-last draft recv recv-q unreviewed
|
||
| 131 |  |
Feature: per namespace trust bundle |
4
|
2y | 9d | 2y |   |
lifecycle/stale
|
contributor-last recv recv-q
|
|
| 63 |  |
nit: Rename "Bundle" to "ClusterBundle"
|
15
|
2y | 3wk | 2y |  |
lifecycle/stale
|
commented contributor-last open-milestone pr-merged send
|
Features that deserve a follow-up comment (1)
Resolution: Comment or close the issue
Average age: 1484.7d, Avg wait: 1484.5d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 492 |  |
Onboard with CertManager prow cluster for running CI tests for jniebuhr/aws-pca-issuer |
2
|
4y | 4y | 4y |
kind/feature
|
recv
|
Features that have not been commented on within 90 days (9)
Resolution: Comment or close the issue
Average age: 1486.2d, Avg wait: 164.9d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 4349 |  |
allowing greater configuration for the cloud provider tests |
|
3y | 3y | 3y |  |
lifecycle/frozen
kind/feature
|
commented contributor-last send
|
|
| 6470 |  |
ingress-shim: allow to impersonate ingress-creator instead of using cert-manager serviceaccount |
|
2y | 8mo | 11mo | |
lifecycle/frozen
kind/feature
priority/backlog
|
commented contributor-last send
|
|
| 2930 |  |
Mirror to gcr.io or dockerhub |
|
2
28
|
5y | 3mo | 1y |           |
lifecycle/frozen
kind/feature
priority/important-soon
area/deploy
|
assigned assignee-updated commented contributor-last send
|
| 3381 |  |
Setup separate package for cert-manager API | 
|
5
|
4y | 5mo | 9mo | |
lifecycle/frozen
kind/feature
priority/important-soon
|
assigned assignee-updated commented contributor-last send
|
| 2178 | |
Handling 'unregistering' certificates from Venafi TPP |
22
|
5y | 1y | 1y |       |
lifecycle/frozen
kind/feature
priority/important-longterm
area/venafi
|
commented member-last send
|
|
| 2538 |  |
cert-manager does not use ingress.class from Ingress annotated with cert-manager.io/cluster-issuer |
75
|
5y | 10mo | 2y |                    |
area/api
help wanted
lifecycle/frozen
kind/feature
priority/backlog
|
commented send similar
|
|
| 155 | |
Add 'unreleased version' & 'old version' warning banner to non-latest versions of docs | 5y | 4y | 5y | |
kind/feature
priority/backlog
|
commented contributor-last
|
||
| 492 | |
Onboard with CertManager prow cluster for running CI tests for jniebuhr/aws-pca-issuer |
2
|
4y | 4y | 4y |
kind/feature
|
recv
|
||
| 154 | |
Publish SBOMs | 1y | 10mo | 10mo | |
kind/feature
good first issue
|
commented member-last send
|
Bugs that deserve a follow-up comment (12)
Resolution: Comment or close the issue
Average age: 353.0d, Avg wait: 269.0d
Bugs that have not been commented on within 60 days (17)
Resolution: Comment or close the issue
Average age: 483.7d, Avg wait: 189.8d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 6969 | |
Should upgrade status managed fields from CSA to SSA when ServerSideApply feature gate enabled | 1y | 8mo | 1y | |
lifecycle/frozen
kind/bug
priority/important-longterm
|
commented contributor-last send
|
|||
| 5959 |  |
`ImagePullBackoff` on `cm-acme-http-solver` pod, if using private registries |
20
|
2y | 8mo | 2y |      |
lifecycle/frozen
kind/bug
priority/important-longterm
|
commented contributor-last recv-q send
|
||
| 6230 |  |
cert-manager DDoSes DNS-01 solver - infinite rate limiting |
4
|
2y | 4mo | 8mo |         |
lifecycle/frozen
kind/bug
priority/critical-urgent
area/acme/dns01
|
commented open-milestone send
|
||
| 4685 | |
Unexpected EOF during watch stream event decoding: unexpected EOF -- possibly due to api server upgrades / restarts |
11
|
3y | 11mo | 1y |       |
lifecycle/frozen
kind/bug
priority/important-longterm
|
commented member-last send
|
||
| 5867 |  |
Controller can't handle hitting request rate limits of zerossl ACME API
|
7
12
31
|
2y | 2mo | 11mo |               |
lifecycle/frozen
kind/bug
priority/important-soon
|
commented pr-closed pr-merged recv-q send
|
||
| 12 previously listed items omitted: #7687 #7648 #7685 #7643 #7630 #7629 #7218 #7506 #6741 #6184 #5751 #4749 | |||||||||||
Items that deserve a follow-up comment (171)
Resolution: Comment or close the issue
Average age: 931.7d, Avg wait: 891.6d
Items that have not been commented on within 60 days (207)
Resolution: Comment or close the issue
Average age: 1036.9d, Avg wait: 721.5d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 6709 | |
1.14 Release Review |
3
|
1y | 9mo | 1y | |
lifecycle/frozen
priority/important-soon
|
commented contributor-last send
|
||
| 6160 |  |
Helm Chart global repository |
2
|
2y | 4mo | 4mo |    |
lifecycle/frozen
|
commented member-last pr-reviewed-with-comment send
|
||
| 6132 | |
Checklist: CNCF Graduation
|
|
2y | 8mo | 8mo |  |
lifecycle/frozen
priority/important-soon
|
commented member-last pr-unreviewed
|
||
| 5298 | |
Complete the Migration Away From Jetstack Names | 2y | 9mo | 1y | |
lifecycle/frozen
kind/cleanup
priority/important-soon
|
commented member-last send
|
|||
| 4191 | |
Setting default values for Pod's "resources"? |
7
|
3y | 8mo | 8mo |  |
lifecycle/frozen
priority/important-longterm
|
commented contributor-last recv-q send
|
||
| 4950 | |
General flakiness of our end-to-end suite
|
3
|
3y | 11mo | 2y |  |
lifecycle/frozen
priority/important-longterm
kind/flake
|
commented member-last pr-closed pr-merged send
|
||
| 1168 |  |
docs: Add info about client side certificate rotation best practices.
|
27
|
6y | 5y | 5y |    |
help wanted
lifecycle/frozen
kind/documentation
priority/backlog
|
commented contributor-last pr-closed send
|
||
| 1546 | |
Self upgrade PRs don't run checks |
|
9mo | 9mo | 9mo | |
commented member-last
|
|||
| 1262 | |
v1.9 to v1.10 upgrade instructions does not mention container name change |
| 2y | 3mo | 11mo | |
priority/backlog
|
assigned assignee-updated commented member-last send
|
||
| 1194 |  |
Confusing paragraph - cert-manager integration. | 2y | 9mo | 2y | |
documentation
priority/important-longterm
|
commented member-last send
|
|||
| 1186 | |
Document that/why we don't use Helm's CRD installation mechanism |
| 2y | 11mo | 11mo | |
good first issue
priority/important-longterm
kind/documentation
|
assigned assignee-updated commented member-last send
|
||
| 1174 |  |
Document the docker images and how to find them |
|
2y | 2y | 2y | |
good first issue
priority/important-soon
kind/documentation
|
commented member-last send
|
||
| 1168 | |
Rendering issues for generated API docs
|
2y | 2y | 2y | |
commented member-last pr-merged
|
||||
| 1101 | |
Feature request for updating documentation. | 2y | 9mo | 9mo | |
priority/backlog
|
commented member-last send similar
|
|||
| 899 |  |
Upgrading from v1.7 to v1.8 check command should exclude null. |
2
|
3y | 8mo | 8mo |   |
priority/important-soon
|
commented member-last pr-approved send
|
||
| 776 | |
Explain that you can pre-provision a Secret and Certificate.Spec.SecretName can refer to an existing Secret | 3y | 3y | 3y | |
commented member-last send
|
||||
| 697 |  |
[IRSA] Needs `runAsUser: 1001`
|
3y | 8mo | 8mo | |
commented member-last pr-merged send
|
||||
| 583 | |
cert-manager with ZeroSSL | 45
|
4y | 2y | 2y |            |
commented send
|
|||
| 543 | |
Add getting started documentation for users who want to quickly use cert-manager to issue LetsEncrypt certificates |
4
|
4y | 4y | 4y | |
commented member-last send
|
|||
| 532 | |
Rework of the landing page (cert-manager.io) |
3
|
4y | 3y | 4y | |
help wanted
good first issue
|
commented member-last send
|
||
| 425 | |
Document ocspServers | 4y | 4y | 4y | |
kind/documentation
|
commented member-last
|
|||
| 414 | |
Explain cert-manager repo structure
|
|
2
|
4y | 4y | 4y | |
priority/backlog
kind/documentation
|
assigned assignee-updated commented member-last pr-closed pr-merged send
|
|
| 401 | |
Bring tutorials up to date | 4y | 2y | 2y | |
priority/important-longterm
|
commented member-last send
|
|||
| 320 | |
Document how to install cert-manager using gitops and known issues with particular gitops implementations
|
5
|
4y | 2y | 4y |   |
documentation
help wanted
priority/backlog
|
commented pr-merged recv-q
|
||
| 295 |  |
Route53 | 4y | 4y | 4y | |
kind/documentation
|
commented member-last send
|
|||
| 223 | |
Document wildcard certificate tutorial | 5y | 4y | 5y |  |
priority/important-longterm
kind/documentation
|
commented contributor-last send
|
|||
| 195 | |
Document keystores | 5y | 2y | 4y | |
priority/important-soon
kind/documentation
|
commented contributor-last send
|
|||
| 174 |  |
Add documentation for CRD conversion webhook ca injection | 5y | 4y | 4y | |
help wanted
priority/important-soon
kind/documentation
|
commented member-last send
|
|||
| 234 |  |
Backup and Restore Resources
|
3
|
5y | 4y | 4y |  |
priority/backlog
kind/documentation
|
commented member-last pr-merged send
|
||
| 79 | |
Design for partial automation of release process | 3y | 3y | 3y | |
commented member-last send
|
||||
| 42 | |
Publish latest release number as part of creating a final release |
|
3y | 3y | 3y | |
commented member-last send
|
|||
| 19 | |
Incorrect command line help: should include a --branch argument | 4y | 4y | 4y | |
kind/cleanup
|
commented contributor-last
|
|||
| 31 | |
Move the manual steps of our release process to cmrel commands
|
4y | 3y | 3y | |
commented member-last pr-closed
|
||||
| 153 |  |
It is possible to have several CAs within the same cluster. |
3
|
3y | 7mo | 2y |   |
commented send
|
|||
| 288 | |
Feature: Take control of approval for the whole cluster |
2
|
2y | 1y | 1y | |
commented member-last
|
|||
| 245 | |
Split Bundle controller into multiple controllers |
|
2y | 5mo | 5mo |  |
lifecycle/frozen
|
commented member-last send
|
||
| 171 | |
E2E Test Cleanup | 1y | 1y | 1y | |
good first issue
|
commented member-last
|
|||
| 45 |  |
Unable to mount and read only file error |
5
|
3y | 9mo | 9mo |     |
priority/awaiting-more-evidence
|
commented send
|
||
| 42 |  |
Intermittent csi-driver-spiffe failure: Unable to mount cert | 2y | 2y | 2y | |
commented member-last send
|
||||
| 39 |  |
csi-driver-spiffe vs csi-driver |
5
|
2y | 2y | 2y | |
commented member-last send
|
|||
| 14 |  |
Annotation generates CertificatesRequests repeatedly until blocked by letsencrypt | 2y | 2y | 2y | |
commented member-last send similar
|
||||
| 70 |  |
OLM deployment with ArgoCD is OutOfSync |
|
3y | 2y | 2y |  |
commented send
|
|||
| 60 |  |
Support prometheus metrics |
|
1y | 7mo | 7mo | |
priority/backlog
|
commented member-last pr-reviewed-with-comment send
|
||
| 81 | |
Configuring Peribolos for Github org management | 6y | 9mo | 9mo | |
priority/backlog
|
commented member-last send
|
|||
| 202 | |
Makefile Modules, Go Versions and Vendoring |
|
8mo | 8mo | 8mo | |
commented contributor-last
|
|||
| 35 | |
Post-Graduation Suggestion Tracker
|
|
9mo | 9mo | 9mo | |
commented member-last pr-merged
|
|||
| 6 |  |
security description | 6y | 6y | 6y | |
commented member-last send
|
||||
| 3 | |
Make unit testing easier/make examples work
|
6y | 9mo | 3y |    |
priority/important-longterm
|
commented member-last pr-closed send
|
|||
| 27 |  |
failed with: OpenAPI spec does not exist
|
2
6
|
4y | 9mo | 2y |        |
priority/critical-urgent
|
commented pr-closed pr-unreviewed send
|
||
| 197 |  |
Kubectl One-line Installation Support | 9mo | 7mo | 7mo | |
commented member-last send similar
|
||||
| 157 previously listed items omitted | |||||||||||