github.com/cert-manager/cert-manager issues | Ecosyste.ms: OpenCollective

challenge stuck in pending state - certifcate never gets ready

prashant-shahi opened this issue about 1 year ago

Refactor GenerateCSR and deprecate the helper functions

inteon opened this pull request about 1 year ago

Mitigate potential Slowloris attacks by setting ReadHeaderTimeout in all http.Server instances

wallrj opened this pull request about 1 year ago

BUGFIX: LiteralCertificateSubject webhook logic

inteon opened this pull request about 1 year ago

Only use sized integers in public API

inteon opened this pull request about 1 year ago

Rename internal API fields to match the field names in the public API

inteon opened this pull request about 1 year ago

cert-manager kubectl plugin does not support the `--context` flag

taxilian opened this issue about 1 year ago

Unable to create certificates for domains mentioned in Selector DNS zones

ManishJain-TomTom opened this issue about 1 year ago

Support for "UID" RDN in X509 Subject

ykoer opened this issue about 1 year ago

[question] about images in gcr.io/distroless

zijin520 opened this issue about 1 year ago

Allow chart to have full customization over http01.ingress

lwj5 opened this issue about 1 year ago

Issuer for Gateway uses the hostname only rather than the httproutes

ryanobjc opened this issue about 1 year ago

Allow algorithm selection for keystore "passwords"

SgtCoDFish opened this issue about 1 year ago

Internal error occurred: failed calling webhook "webhook.cert-manager.io": failed to call webhook code 503: 503 Service Unavailable

hpeaj opened this issue about 1 year ago

Add an `approveSignerNames` install option

inteon opened this issue about 1 year ago

Creating multiple Certificates with duplicate dnsNames (Issuing certificate as Secret does not exist)

mednbiba opened this issue about 1 year ago

Update AWS SDK for Go to 1.48.7

JoeNorth opened this pull request about 1 year ago

Can't verify image signature

LMantovan opened this issue about 1 year ago

Replace deprecated pkcs12 function call with pkcs12.LegacyRC2

inteon opened this pull request about 1 year ago

First draft of e2e test to try to reproduce same domain multiple orders race condition

Git-Jiro opened this pull request about 1 year ago

Switch go-pkcs12 to use LegacyDES encoder

erikgb opened this pull request about 1 year ago

[release-1.13] Upgrade otel, docker and jose to fix CVE alerts

inteon opened this pull request about 1 year ago

[release-1.12] Upgrade otel and docker to fix CVE alerts

inteon opened this pull request about 1 year ago

Bump the go-jose dependency

inteon opened this pull request about 1 year ago

Checklist for next backport release

SgtCoDFish opened this issue about 1 year ago

DNS-01 challenge propagation | NS ns-512.awsdns-00.net.:53 returned REFUSED for _acme-challenge ....

ivneetsinghwahi03 opened this issue about 1 year ago

reinstall failed after k8s upgrade

gianlucaverona opened this issue about 1 year ago

[release-1.13] BUGFIX: Limit webhook admission input

jetstack-bot opened this pull request about 1 year ago

[release-1.12] BUGFIX: Limit webhook admission input

jetstack-bot opened this pull request about 1 year ago

Overly strict subject requirements

SgtCoDFish opened this issue about 1 year ago

Webhook validation bugs for cert subjects

SgtCoDFish opened this issue about 1 year ago

Cert-manager currently faces difficulties renewing certificates within the EKS.

mahouESPRIT opened this issue about 1 year ago

Can the duration of the server cert that is generated for the webhook be set?

michaelajr opened this issue about 1 year ago

feature: added name constraints in certs with isCA enabled

tanujd11 opened this pull request about 1 year ago

Fix controller feature gates config in helm

avi-08 opened this pull request about 1 year ago

BUGFIX: Limit webhook admission input

inteon opened this pull request about 1 year ago

Add Core Infrastructure Initiative Best Practices badge

SgtCoDFish opened this pull request about 1 year ago

[helm] wrong value in config sample in values.yaml

Jean-Daniel opened this issue about 1 year ago

Enable verbose logging in startupapicheck by default

wallrj opened this pull request about 1 year ago

Bug: Lower Memory Usage - Filtered Secrets Label Caused Unwarranted Renewal of Certificates

antstacks opened this issue about 1 year ago

BUGFIX: Fix consistency bugs in filtered secrets logic

inteon opened this pull request about 1 year ago

BUGFIX: run pprof server on non-leaderelected replicas

inteon opened this pull request about 1 year ago

Bump docker to fix cve alert

inteon opened this pull request about 1 year ago

Add support for custom-fields into the ingress annotations

salindaliyanage opened this issue about 1 year ago

Increase the default webhook timeout to its maximum value of 30 seconds

wallrj opened this pull request about 1 year ago

Fix CVE alert

inteon opened this pull request about 1 year ago

Add x509 v3 CA Issuers Extension

jeremycampbell-okta opened this pull request about 1 year ago

Option to specify AIA CA Issuers URL

jeremycampbell-okta opened this issue about 1 year ago

[release-1.13] Use explicit debian version for base images

jetstack-bot opened this pull request about 1 year ago

[release-1.12] Use explicit debian version for base images

jetstack-bot opened this pull request about 1 year ago

Difficult to diagnose startupapicheck errors

wallrj opened this issue about 1 year ago

[release-1.12] Regenerate hardcoded certs

jetstack-bot opened this pull request about 1 year ago

[release-1.13] Regenerate hardcoded certs

jetstack-bot opened this pull request about 1 year ago

Use explicit debian version for base images

SgtCoDFish opened this pull request about 1 year ago

Update distroless base image tags

SgtCoDFish opened this issue about 1 year ago

Regenerate hardcoded certs

SgtCoDFish opened this pull request about 1 year ago

Expired test fixture cert

SgtCoDFish opened this issue about 1 year ago

preferredChain attribute on Clusterissuer doesn't pull ISRG X1 root certificate on lets-encrypt provider

AstritCepele opened this issue about 1 year ago

Incorrect error when validating Certificate PrivateKey

SgtCoDFish opened this issue about 1 year ago

Ingress labels copied to certificate, causing issues with applysets

kwohlfahrt opened this issue about 1 year ago

Create TLSA records automatically

4censord opened this issue about 1 year ago

ingress-shim: allow to impersonate ingress-creator instead of using cert-manager serviceaccount

tobikris opened this issue about 1 year ago

Gateway API v1

hawksight opened this issue about 1 year ago

cainjector: Use controller-runtime manager to manage goroutine instead of errorgroup.

inteon opened this pull request about 1 year ago

helm chart misses webhook toggle

wibed opened this issue about 1 year ago

Cannot supply trusted ca certificate bundle for the ACMEDNS solver

nickytd opened this issue about 1 year ago

Requeing due to optimistic locking and slow retry

jan-kantert opened this issue about 1 year ago

Ensure ACME solver Pod complies with Pod Security Standards

wallrj opened this pull request about 1 year ago

Remove redundant / misleading runAsNonRoot examples from values.yaml

wallrj opened this pull request about 1 year ago

feat(helm): allow configuration of cainjector feature gates

erikgb opened this pull request about 1 year ago

feat(helm) Add support for PodMonitor

shlomitubul opened this pull request about 1 year ago

Jetstack helm repo seems to be down

jsaady opened this issue about 1 year ago

Error from server (InternalError): Internal error occurred: failed calling webhook "webhook.cert-manager.io": failed to call webhook: Post "https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s": No agent available

geekette86 opened this issue about 1 year ago

Add optional hostAliases to cert-manager pod

Pionerd opened this pull request about 1 year ago

Switch Webhook to controller-runtime.

inteon opened this pull request about 1 year ago

Feature/issue 5514 venafi issuer ca ref

sankalp-at-gh opened this pull request about 1 year ago

Enable readOnlyRootFilesystem by default

wallrj opened this pull request about 1 year ago

Use latest version of the best-practice Helm values

wallrj opened this pull request about 1 year ago

[release-1.13] Update ctl's cert-manager dependency to latest 1.13 commit

inteon opened this pull request about 1 year ago

[release-1.12] Update ctl's cert-manager dependency to latest 1.12 commit

inteon opened this pull request about 1 year ago

Bump gRPC library version to fix CVE alert

inteon opened this pull request about 1 year ago

Can I apply for certificates across projects in GCP?

willpan122 opened this issue about 1 year ago

Fix kindest image digests

wallrj opened this pull request about 1 year ago

[release-1.13] fix HTTP2 CVE alerts

inteon opened this pull request about 1 year ago

[release-1.13] fix HTTP2 CVE alerts

inteon opened this pull request about 1 year ago

[release-1.12] fix HTTP2 CVE alerts

inteon opened this pull request about 1 year ago

Question: get accountid from Lets Encrypt cert

corite opened this issue about 1 year ago

Fix image checksum validation and upgrade ingress NGINX to demonstrate the problem

wallrj opened this pull request about 1 year ago

Use sample-external-issuer v0.4.0

wallrj opened this pull request about 1 year ago

[release-1.13] bump otel dependency: fixing CVE alert

inteon opened this pull request about 1 year ago

[release-1.13] bump otel dependency: fixing CVE alert

inteon opened this pull request about 1 year ago

[release-1.12] bump otel dependency: fixing CVE alert

inteon opened this pull request about 1 year ago

fix(helm): templating of required value in controller and webhook configmaps

ABWassim opened this pull request about 1 year ago

Handle license generation for every platform

SgtCoDFish opened this issue about 1 year ago

fix error message when setting up vault issuer

vinny-sabatini opened this pull request about 1 year ago

[release-1.13] Bump golang.org/x/net

SgtCoDFish opened this pull request about 1 year ago

[release-1.12] Bump golang.org/x/net

SgtCoDFish opened this pull request about 1 year ago

[release-1.13] Licence checker updates

SgtCoDFish opened this pull request about 1 year ago

[release-1.12] Licence checker updates

SgtCoDFish opened this pull request about 1 year ago

Fix the 'make update-licenses' command on macos

inteon opened this pull request about 1 year ago