Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/cert-manager/cert-manager

Automatically provision and manage TLS certificates in Kubernetes
https://github.com/cert-manager/cert-manager

Adds some warnings for folks to not import feature gates into shared code

Really we should restructure this to remove the possibility of accidentally overwriting other co...

8a34cbc0a0b23968f5e8f90343a40ccb1af12ff5 authored over 1 year ago by irbekrm <[email protected]>
Don't import controller's feature gate setup into a shared library

To prevent controller's feature gates from overwriting other component's feature gates

Signed-o...

b1a59164e00727830c46192a99e56f50c400905e authored over 1 year ago by irbekrm <[email protected]>
Merge pull request #6085 from irbekrm/disable_apf_for_webhook

Disable APF for webhook extension apiserver

5c0722dccbbda2b2b4c140511598d402e5997ad3 authored over 1 year ago by jetstack-bot <[email protected]>
Don't run API Priority and Fairness controller in webhook extension apiserver

Because it is not needed and can cause issues with older versions of kube

Signed-off-by: irbekr...

524998abdf9e82084137eb7f664583d1c623d743 authored over 1 year ago by irbekrm <[email protected]>
Merge pull request #6084 from irbekrm/bump_cm_in_cli

Updates cmctl to point at latest cert-manager

7ccb3235492580f0b043bb10c452a69944b9b43e authored over 1 year ago by jetstack-bot <[email protected]>
Updates cmctl to point at latest cert-manager

Signed-off-by: irbekrm <[email protected]>

132ab27cec89c51998a0845abb58b9290113d9b8 authored over 1 year ago by irbekrm <[email protected]>
Merge pull request #6077 from lucacome/bump-k8s.io-deps

Bump k8s.io dependencies

d18597223792fe627ac6869409a527840740c8d0 authored over 1 year ago by jetstack-bot <[email protected]>
Bump k8s.io dependencies

Signed-off-by: Luca Comellini <[email protected]>

bf6bbb19de7dffb38954c64d3cdc5d9646c53a5e authored over 1 year ago by Luca Comellini <[email protected]>
Merge pull request #6034 from gdvalle/patch-1

apis/acme/v1: ACMEIssuer: set omitempty on optional field

529497f150eccf92efcf1f17851a4e0dc22fe78a authored over 1 year ago by jetstack-bot <[email protected]>
Merge pull request #6078 from irbekrm/kubebuilder_shas

Kubebuilder shas

1be0238ec900084fe0b27e93981dc4ecfc64ab3c authored over 1 year ago by jetstack-bot <[email protected]>
Bumps kubebuilder SHAs

As the kubebuilder tools for 1.27.1 have been repushed

Signed-off-by: irbekrm <[email protected]>

f2b97a5dd37fbf092a928e7647a30f3233577dd1 authored over 1 year ago by irbekrm <[email protected]>
Merge pull request #6032 from inteon/fix_acme_bugs

Fix small bugs and make small improvements in ACME code

022292832f682d8769000766a68a336fb7f50044 authored over 1 year ago by jetstack-bot <[email protected]>
Merge pull request #6068 from cert-manager/docker_upgrade

Upgrade github.com/docker/distribution v2.8.2+incompatible

691474bc61d6d5db77dfb62c27a7892e55fd26f2 authored over 1 year ago by jetstack-bot <[email protected]>
upgrade all our docker deps

Signed-off-by: Tim Ramlot <[email protected]>

0284d20a74c1357470c5d0fed2f4aee05713b1ab authored over 1 year ago by Tim Ramlot <[email protected]>
Merge pull request #6066 from inteon/fix_gomod

Fix cmctl go.mod: make it importable & make it go installable

897329fd76720cd225fbff952a2dee74bd9bf3e4 authored over 1 year ago by jetstack-bot <[email protected]>
replace go.mod replace statements with require statements

Signed-off-by: Tim Ramlot <[email protected]>

d14ffca0491f4f219612fcbb433c34803f92af0c authored over 1 year ago by Tim Ramlot <[email protected]>
allow importing the ctl cmd package

Signed-off-by: Tim Ramlot <[email protected]>

2ba39e9ebcd745855df60116bcfdf59ed6dd217d authored over 1 year ago by Tim Ramlot <[email protected]>
Merge pull request #6061 from irbekrm/bump_helm

Bump helm

876ae84ab185ad8c219a835b5aae959929abc51b authored over 1 year ago by jetstack-bot <[email protected]>
make update-licenses

Signed-off-by: irbekrm <[email protected]>

16bfe3393773b556cdbd05e603c0ea73a907a52e authored over 1 year ago by irbekrm <[email protected]>
Bumps Helm to latest release

Signed-off-by: irbekrm <[email protected]>

b67c68859debcbcb3898a5663512835ef56efc52 authored over 1 year ago by irbekrm <[email protected]>
Merge pull request #6059 from irbekrm/bump_cr

Bumps c/r to latest commit

470ca25e349515338cb73dc6f46d5afb233dab82 authored over 1 year ago by jetstack-bot <[email protected]>
Bumps c/r to latest commit

To ensure that there is as little diff as possible with c/r 0.15

Signed-off-by: irbekrm <irbekr...

5ee7b50ca86d1d13b99749256e84a6e486d3b247 authored over 1 year ago by irbekrm <[email protected]>
make KeyUsage and BasicConstraints Critical extensions

Signed-off-by: Tim Ramlot <[email protected]>

9606f4d5feda30e59aaba994381145d93be24161 authored over 1 year ago by Tim Ramlot <[email protected]>
use Version 3 for all Certificates and Version 0 for all CertificateRequests

Signed-off-by: Tim Ramlot <[email protected]>

e7530880ce2ea544ee48cb7c69f795b146fa8a13 authored over 1 year ago by Tim Ramlot <[email protected]>
Merge pull request #6019 from inteon/improve_pki

Cleanup CSR util/pki code

bf5a482ab71cf115f2192b848722940cd92a5ce2 authored over 1 year ago by jetstack-bot <[email protected]>
keep using deprecated functions in ctl binary

Signed-off-by: Tim Ramlot <[email protected]>

6580975331764e242cc7ea6030be50f2c9157945 authored over 1 year ago by Tim Ramlot <[email protected]>
switch to non-deprecated functions in source code

Signed-off-by: Tim Ramlot <[email protected]>

0cf0f80b40f8bcda2792b641986c2c31cec18e5c authored over 1 year ago by Tim Ramlot <[email protected]>
remove CertificateTemplateAddKeyUsages

Signed-off-by: Tim Ramlot <[email protected]>

20599d1d3548a827f767c65f5d648605454e24ed authored over 1 year ago by Tim Ramlot <[email protected]>
cleanup CSR & CertificateTemplate util code

Signed-off-by: Tim Ramlot <[email protected]>

1c2662af82e1562606b2082e4b6b07aad6ea35e9 authored over 1 year ago by Tim Ramlot <[email protected]>
Merge pull request #6031 from inteon/remove_deprecated_3

Replace deprecated wait.PollUntil and wait.Poll

308c1472aa52bc3f8debdaefaa3230d65a8929fe authored over 1 year ago by jetstack-bot <[email protected]>
Merge pull request #6049 from SgtCoDFish/cmctl-binary

Directly import cert-manager in cmctl

3e003cd0d1687eef1cfbe3022f703c54bcb002f2 authored over 1 year ago by jetstack-bot <[email protected]>
use a concrete cert-manager version for cmctl

Signed-off-by: Ashley Davis <[email protected]>

9f1c1cf247388de23dbb8dc62b37479a22ea430f authored over 1 year ago by Ashley Davis <[email protected]>
update cmrel version to enable new module validation flags

Signed-off-by: Ashley Davis <[email protected]>

ab8c4c957fd4acd0f4749ea62e537c2d389d8aab authored over 1 year ago by Ashley Davis <[email protected]>
Merge pull request #6047 from irbekrm/pull_out_test_framework

Pull out test framework functionality

4959b1ce1a71da2af05e2ea69aae0f3657434eca authored over 1 year ago by jetstack-bot <[email protected]>
Add a comment about splitting this package

Signed-off-by: irbekrm <[email protected]>

b094df3bd3feded2e2760c9c4688109eaa19456d authored over 1 year ago by irbekrm <[email protected]>
Makes test framework accessible externally

Signed-off-by: irbekrm <[email protected]>

97a3eb8697037206daa25c8fa5e59e9d357e368a authored over 1 year ago by irbekrm <[email protected]>
Merge pull request #6044 from irbekrm/fix_kubebuilder

Update kubebuilder tools SHAs

ca8027098f3f9f5aad762100ef40ed8b7f377798 authored over 1 year ago by jetstack-bot <[email protected]>
Update kubebuilder tools SHAs

Signed-off-by: irbekrm <[email protected]>

ee022d42b3efc00507385a4fcf51c80df78a62ad authored over 1 year ago by irbekrm <[email protected]>
Merge pull request #6041 from SgtCoDFish/webhooktesting

Move webhook testing package to core module

8f00e0e53c3a0aa0089ae260b8fa2fc4679e762c authored over 1 year ago by jetstack-bot <[email protected]>
Move webhook testing package to core module

This package was used by at least one external importer [1] and so the
change to make the webhoo...

209c252005d69914b3e10dd42b1b812f34425a3d authored over 1 year ago by Ashley Davis <[email protected]>
replace deprecated wait.PollUntil() and wait.Poll()

Signed-off-by: Tim Ramlot <[email protected]>

e08a13496dc4ba61589469c6076275bd5c0253d5 authored over 1 year ago by Tim Ramlot <[email protected]>
Merge pull request #6030 from inteon/remove_deprecated_2

Replace deprecated wait.PollImmediate

3fee31c0c5a38bee274a05e54a73d8aa591f9581 authored over 1 year ago by jetstack-bot <[email protected]>
Merge pull request #6029 from inteon/fix_cleanup_panic

Fix cleanup panic

3372bed3c888a1ccf599df2298b2a1bc46fed57c authored over 1 year ago by jetstack-bot <[email protected]>
fix small bugs and make small improvements

Signed-off-by: Tim Ramlot <[email protected]>

7d0178f27d306eee19edd0eee9c71a38c6210b22 authored over 1 year ago by Tim Ramlot <[email protected]>
check that issuer is not nil before reading its field values on cleanup

Signed-off-by: Tim Ramlot <[email protected]>

e9c4cd9f3f15227968b0a48f4d087ca443ac68bf authored over 1 year ago by Tim Ramlot <[email protected]>
replace usage of wait.PollImmediate

Signed-off-by: Tim Ramlot <[email protected]>

f16a3f56d166c845675cc20e110343eaaad05796 authored over 1 year ago by Tim Ramlot <[email protected]>
Merge pull request #6036 from irbekrm/fix_trivy_vulns

Fix trivy vulns

50ac8588989bf426e64eef15cc38bd751e3dcc64 authored over 1 year ago by jetstack-bot <[email protected]>
Merge pull request #6027 from inteon/remove_deprecated

Replace deprecated wait.PollImmediateUntil

c52ba695481dbc00aa054f6ef9fb4ebff5930749 authored over 1 year ago by jetstack-bot <[email protected]>
Fix trivy vulnerabilities

Signed-off-by: irbekrm <[email protected]>

b8029dc7580b155e81cd74058ea184bd7f2c7050 authored over 1 year ago by irbekrm <[email protected]>
apis/acme/v1: ACMEIssuer: set omitempty on optional field

This field is marked optional in the API docs, but is required when serializing JSON. Make it op...

662900a1d3e5817ede37fa04f9e7ab2c48226f5c authored over 1 year ago by Greg <[email protected]>
replace deprecated PollImmediateUntil with PollUntilContextCancel

Signed-off-by: Tim Ramlot <[email protected]>

d656b2d9da8483e81eb07fc659865d75e3e174b0 authored over 1 year ago by Tim Ramlot <[email protected]>
Merge pull request #5828 from malovme/structured-logs

Add support for json logging format

acdb055106ac4f3781768764a3c40f278b1b5470 authored over 1 year ago by jetstack-bot <[email protected]>
update dependencies and LICENSE files

Signed-off-by: Tim Ramlot <[email protected]>

2687b02e3f3509ed8e105d03a8d3d35668837c92 authored over 1 year ago by Tim Ramlot <[email protected]>
fix feedback

Signed-off-by: Tim Ramlot <[email protected]>

8747adf629a329f9d9eba742f00561fdd01eb905 authored over 1 year ago by Tim Ramlot <[email protected]>
revert setting flags for logging tests

Signed-off-by: Tim Ramlot <[email protected]>

dc12a5d0a047af3a5fb7a3d38afb64559fb99b41 authored over 1 year ago by Tim Ramlot <[email protected]>
use same logging flags for every cli and simplify flag logic

Signed-off-by: Tim Ramlot <[email protected]>

5091a3bff4b174e5d80182a56703d697f409353e authored over 1 year ago by Tim Ramlot <[email protected]>
remove logging flags from acmesolver

Signed-off-by: Tim Ramlot <[email protected]>

c113a3eadcead7a39e0f3c16131bf064a147b729 authored over 1 year ago by Tim Ramlot <[email protected]>
further standardise logging across components

Signed-off-by: Tim Ramlot <[email protected]>

f0871eb6b8804e7deb2604258c991f80dc7150ef authored over 1 year ago by Tim Ramlot <[email protected]>
Add support for json logging format

Signed-off-by: Michael Malov <[email protected]>

99e23d5e93cf8f260fe9f87c2e4d50f470e6ef88 authored over 1 year ago by Michael Malov <[email protected]>
Merge pull request #5961 from lucacome/bump-k8s.io-deps

Bump k8s.io dependencies

8a0a8beabecd99daaafc34ac436bbf2b6ff08843 authored over 1 year ago by jetstack-bot <[email protected]>
Ensures that acmesolver implements SingularNameProvider

Signed-off-by: irbekrm <[email protected]>

df974120ab9d220858c179486d0c10eb54b47601 authored over 1 year ago by irbekrm <[email protected]>
Update licenses

Signed-off-by: irbekrm <[email protected]>

7f0766e305e1fadb094ea23d6cf6ae2e1e2f35b5 authored over 1 year ago by irbekrm <[email protected]>
Bump Helm dependency

Signed-off-by: irbekrm <[email protected]>

c30bd2cf53d7796f0f351ece263dc501daba65e2 authored over 1 year ago by irbekrm <[email protected]>
Update cainjector inejctable setup

To work with latest controller runtime

Signed-off-by: irbekrm <[email protected]>

3d1134a975bf6f2564d7a67ad78238ecd42e1ef3 authored over 1 year ago by irbekrm <[email protected]>
Fix otel incompatibilities

Signed-off-by: irbekrm <[email protected]>

0d64973359715d42a3d5b2472cd6f608a718fc9b authored over 1 year ago by irbekrm <[email protected]>
Bump k8s.io dependencies

Signed-off-by: Luca Comellini <[email protected]>

a57c4abb1457941a8617700a194fd8f2755677b2 authored over 1 year ago by Luca Comellini <[email protected]>
Bump sigs.k8s.io/controller-runtime

Signed-off-by: Luca Comellini <[email protected]>

b52ed6303dd3d3828f3e1788955c38c9576e4cb8 authored over 1 year ago by Luca Comellini <[email protected]>
Bump sigs.k8s.io/controller-tools to v0.12.0

Signed-off-by: Luca Comellini <[email protected]>

1bfc131e6a85bce48811b7158bd9a1046134360a authored over 1 year ago by Luca Comellini <[email protected]>
Update OnAdd

Signed-off-by: Luca Comellini <[email protected]>

df6ec95cd164d5f2916b2b39cbb6a9c1ed7f5034 authored over 1 year ago by Luca Comellini <[email protected]>
Merge pull request #6022 from wallrj/fix-flaky-leader-election-healthz-tests

Fix flaky leader election healthz tests

ab4415837c61b42680be1e46fa61c6c71a025ee5 authored over 1 year ago by jetstack-bot <[email protected]>
Simulate a remote leader that always updates its lease

Fixes test flakes caused by the local node taking over leadership,
because it did not observe an...

83ce550c4cb1486f37220634615a08333202c889 authored over 1 year ago by Richard Wall <[email protected]>
Merge pull request #5991 from inteon/pr/JoshVanL/4810

Server Side Apply: Adds support for CA Injector controller

a64088792de811957f71395a3d684fd6661b715b authored over 1 year ago by jetstack-bot <[email protected]>
only apply patch if patch is != nil

Signed-off-by: Tim Ramlot <[email protected]>

a3dbd227527882c1ce22c43a850450285e6fb579 authored over 1 year ago by Tim Ramlot <[email protected]>
Merge pull request #6006 from vidarno/cache-private-key-hash-on-issuer-status

Cache private key hash on issuer status

5035dda25e8839ef0a0737efdb3df6ff1e97f6e1 authored over 1 year ago by jetstack-bot <[email protected]>
Merge pull request #6018 from wallrj/hide-healthz-flags

Hide the new healthz server flags

e53584766b86645a8daf0d81c2d61524fbe8f09a authored over 1 year ago by jetstack-bot <[email protected]>
Merge pull request #6017 from irbekrm/importable_webhook_tests

Make external DNS webhook tests importable again

346de1002dc41ee5ae4bd76640d90501b507923e authored over 1 year ago by jetstack-bot <[email protected]>
Adds a package comment, fixes imports

Signed-off-by: irbekrm <[email protected]>

a45a8b3a39d32f703d83354c89cec7e8a0f07a67 authored over 1 year ago by irbekrm <[email protected]>
Make external DNS webhook tests importable again

Signed-off-by: irbekrm <[email protected]>

206b6def1ed4f7d8e11bfb3d306e14f73d1d55f6 authored over 1 year ago by irbekrm <[email protected]>
Hide the new healthz server flags

We are unsure about the implementation of the healthz server as a separate HTTP
server. and we m...

901538c24eb3b230c41a9329b201d8ff027f06a6 authored over 1 year ago by Richard Wall <[email protected]>
Merge pull request #5972 from vinzent/bugfix/issue-5755

Check JKS/PKCS12 truststore in Secrets only if issuer provides the CA

09e71c37d4f726b2a5c00c16fbb3003cb7710597 authored over 1 year ago by jetstack-bot <[email protected]>
Test TestRegistry_AddClient_UpdatesClientPKChecksum must compare private key with a checksum

Signed-off-by: vidarno <>

616a41ac8fb6bd6fc3ff89c671bd31e96baf852f authored over 1 year ago by vidarno <>
use cainjector feature flags

Signed-off-by: Tim Ramlot <[email protected]>

bce882b47711d24128986b1c26bcc705e6f1546d authored over 1 year ago by Tim Ramlot <[email protected]>
Merge pull request #6013 from SgtCoDFish/bumpgo

Bump go + base images

3971774d82cab1012e0be4eef59fd0ccafceffec authored over 1 year ago by jetstack-bot <[email protected]>
resolve feedback

Signed-off-by: Tim Ramlot <[email protected]>

4d81f1877a99355ea6518ae44f4e93ce52bdd7e6 authored over 1 year ago by Tim Ramlot <[email protected]>
bump base images to latest available

Signed-off-by: Ashley Davis <[email protected]>

cd3194c1b523afabb91306a67dc120d5e84bd9b0 authored over 1 year ago by Ashley Davis <[email protected]>
bump to latest go version

Signed-off-by: Ashley Davis <[email protected]>

cd0eb099325163898b195ff86190e9d5bfbe68fb authored over 1 year ago by Ashley Davis <[email protected]>
Merge pull request #5814 from ptrc-n/make-on-m1

Add initial support for linux/arm64 as a dev platform

77409512fe2f0f9357989cfb1ffd0602675765ab authored over 1 year ago by jetstack-bot <[email protected]>
Merge pull request #5747 from inteon/request_matches_spec

BUGFIX: if a LiteralSubject is set, the RequestMatchesSpec function does skip too many checks

694d3d1bd26fdedaa48b432e0a61c44811a425f8 authored over 1 year ago by jetstack-bot <[email protected]>
Merge branch 'cert-manager:master' into cache-private-key-hash-on-issuer-status

Signed-off-by: vidarno <>

a1f156c2b60274ba2a66de55e20145441ab98e38 authored over 1 year ago by vidarno <[email protected]>
Merge pull request #5950 from inteon/use_single_vault_instance

Use single vault instance in e2e tests

3c7f4fddf589596bf40f28fe7a745b1702c5167e authored over 1 year ago by jetstack-bot <[email protected]>
Update tests after adding new LastPrivateKeyHash field in status of issuer CRDs

Signed-off-by: vidarno <>

f7390903be1e1f68b53b34f651c9dc0822e50d45 authored over 1 year ago by vidarno <>
Update logic in function IsKeyCheckSumCached to compare private key with hash in status field of CRD instead of from Secret

Signed-off-by: vidarno <>

92da674e9ada68ca22c91d0b119928dfecb074af authored over 1 year ago by vidarno <>
Extend CRDs and structs to include LastPrivateKeyHash field

Signed-off-by: vidarno <>

49341839273932b11919e6dfbf7dadf22ed8862b authored over 1 year ago by vidarno <>
resolve feedback

Signed-off-by: Tim Ramlot <[email protected]>

349aaf666b92bedc5dc82dbf74262139b5359dbc authored over 1 year ago by Tim Ramlot <[email protected]>
use cluster-wide shared Vault instance

Signed-off-by: Tim Ramlot <[email protected]>

42e6282d02805f22b4536c682309312e4b16e02d authored over 1 year ago by Tim Ramlot <[email protected]>
account for pod not yet existing

Signed-off-by: Tim Ramlot <[email protected]>

29e22e39000545e40ead1fc8f799dc622f7c79aa authored over 1 year ago by Tim Ramlot <[email protected]>
remove custom mount approle, since all approles are now custom mounts

Signed-off-by: Tim Ramlot <[email protected]>

f69dc581ea8172fda7b9828af0090c9d58e253ff authored over 1 year ago by Tim Ramlot <[email protected]>
Merge pull request #6000 from SgtCoDFish/boilersuite

Use boilersuite instead of python

b12644b9aaef73ffef0bd58b545141ebe0eb63d1 authored over 1 year ago by jetstack-bot <[email protected]>
Use boilersuite instead of python

Removes python boilerplate checker, updates our other use of boilerplate
templates and adds inst...

408d17532878f307d72f0f4c59c2584a7f404ef1 authored over 1 year ago by Ashley Davis <[email protected]>
added trivy shasum

Signed-off-by: Patrick Nannt <[email protected]>

55567bdce4931fde07554cd922a786db29798ea7 authored over 1 year ago by Patrick Nannt <[email protected]>