github.com/cert-manager/cert-manager issues | Ecosyste.ms: OpenCollective

Even if CA is expired, cert-manager allows to issue client cert with expired CA

satish-suradkar opened this issue over 1 year ago

[Release v1.12.4] Update cmd/cmctl's go.mod to v1.12.4

maelvls opened this pull request over 1 year ago

Upgrade docker dependencies

inteon opened this pull request over 1 year ago

Upgrade ctl cert-manager dependency to latest master digest

inteon opened this pull request over 1 year ago

[release-1.12] Bump to Go 1.20.7

maelvls opened this pull request over 1 year ago

[release-1.11] Bump to Go 1.19.12

maelvls opened this pull request over 1 year ago

Remove old github.com/miekg/dns replace statement

inteon opened this pull request over 1 year ago

Upgrade go to 1.21

inteon opened this pull request over 1 year ago

Upgrade go-licenses to the latest master version

inteon opened this pull request over 1 year ago

ClusterIssuer CA does not sign certificates

Nickmman opened this issue over 1 year ago

Report issuer/clusterissuer status as a metric

James-Quigley opened this issue over 1 year ago

cleanup: Scope mutating webhook to only certificaterequest resources

hawksight opened this pull request over 1 year ago

Metrics not scraped by kube-prometheus-stack

urbaman opened this issue over 1 year ago

How to pass ServiceAccountName to the acme-http01-solver pod.

Mahesh-Gunda-Maersk opened this issue over 1 year ago

Route53 challenges not regulating failed requests with exponential backoffs

JacobAmar opened this issue over 1 year ago

Certificates only issued for ingress in default namespace

maxbry opened this issue over 1 year ago

cert-manager-webhook deployment deletes on startup

taylorsmithgg opened this issue over 1 year ago

Error "Waiting for DNS-01 challenge propagation: dial udp: address udp/53': unknown port"

snake6887 opened this issue over 1 year ago

Replace k8s.io/utils/pointer with k8s.io/utils/ptr

inteon opened this pull request over 1 year ago

Review Certificate and CertificateRequest API comments

inteon opened this pull request over 1 year ago

Upgrade to k8s 1.28.1 & upgrade cert-manager dependency for ctl

inteon opened this pull request over 1 year ago

Rename DontAllowInsecureCSRUsageDefinition feature flag and make it a Beta flag

inteon opened this pull request over 1 year ago

Cleanup featuregate comments

inteon opened this pull request over 1 year ago

Feature gates: promote StableCertificateRequestName and SecretsFilteredCaching to Beta

inteon opened this pull request over 1 year ago

[release-1.12] fix invalid handling of ip addresses in comparisons

SgtCoDFish opened this pull request over 1 year ago

Run update-licenses

SgtCoDFish opened this pull request over 1 year ago

[release-1.12] Fix invalid handling of ip addresses in comparisons

jetstack-bot opened this pull request over 1 year ago

Helm chart deployment is failing on update to k8s 1.25

ryadav-asapp opened this issue over 1 year ago

Fix invalid handling of ip addresses in comparisons

SgtCoDFish opened this pull request over 1 year ago

Make enableServiceLinks configurable for DeploymentLikes

ubergesundheit opened this pull request over 1 year ago

Remove MaxPathLen CSR blob validation logic

inteon opened this pull request over 1 year ago

Only set logging settings once

inteon opened this pull request over 1 year ago

Add openapi definitions to acme API server

inteon opened this pull request over 1 year ago

Generate cert-manager secret with certificate,key and password

ravirajshankarl opened this issue over 1 year ago

Upgrade all dependencies

inteon opened this pull request over 1 year ago

Remove dependencies on hashicorp libraries after the recent license change

abubakarm94 opened this issue over 1 year ago

Annual review of the OWNERS file (2023): Maartje moved to Emeritus Maintainer

maelvls opened this pull request over 1 year ago

cert-manager PEM format certificate to support private key encryption

britoaldan opened this issue over 1 year ago

JWK(S) support

jroper opened this issue over 1 year ago

The certificate request has failed... order is in "invalid" state

vignesh-vicky-tech opened this issue over 1 year ago

secretName uniqueness not validated

Hakulaku opened this issue over 1 year ago

Issuing certificate as Secret does not contain a private key

Roydon opened this issue over 1 year ago

ServiceTemplate for solver HTTP01

pascal-sochacki opened this issue over 1 year ago

CVEs in image cert-manager-ctl

kpu32167 opened this issue over 1 year ago

ControllerConfiguration fuzzer, only set the value in case the random value is empty

inteon opened this pull request over 1 year ago

[BUGFIX] defaulting partial ControllerConfiguration logging options

inteon opened this pull request over 1 year ago

WebhookConfiguration: change the types of ports from *int to *int32

inteon opened this pull request over 1 year ago

Vault Issuer - Secretless Authentication with a Service Account doesn't work

Armstrong4444 opened this issue over 1 year ago

Solver RFC2136 without TSIG

Midaxess opened this issue over 1 year ago

add tests for ipv6 in ingress-shim

SgtCoDFish opened this pull request over 1 year ago

Chart README uses wrong version for `helm install`

lindhe opened this issue over 1 year ago

Feature Request/Idea - Cert-Manager saves TLS Secret to Azure KeyVault

Krebsmar opened this issue over 1 year ago

Allow hardcoded JKS and PKCS#12 passwords

SgtCoDFish opened this issue over 1 year ago

cleanup: some redundant code clean up

HeavenTonight opened this pull request over 1 year ago

distinguish dns names and ip address

zhangzhiqiangcs opened this pull request over 1 year ago

fix(rbac): add patch verb on secrets to issuer clusterrole

mattoddie opened this pull request over 1 year ago

ipAddresses field in certificates rejects fully expanded IPv6 addresses

JerrySunWRS opened this issue over 1 year ago

Cleanup go.mod files

inteon opened this pull request over 1 year ago

[release-1.12] Fix kubebuilder shas

jetstack-bot opened this pull request over 1 year ago

Annual review of the OWNERS file (2023): remove Joakim

maelvls opened this pull request over 1 year ago

GRADUATION: Write up the Governance and Steering documents

maelvls opened this pull request over 1 year ago

Fix kubebuilder shas

SgtCoDFish opened this pull request over 1 year ago

[release-1.12] Fix kubebuilder shas

SgtCoDFish opened this pull request over 1 year ago

[release-1.11] Update nameserver lookup test to use upstream targets

jetstack-bot opened this pull request over 1 year ago

[release-1.12] Update nameserver lookup test to use upstream targets

jetstack-bot opened this pull request over 1 year ago

Update nameserver lookup test to use upstream targets

SgtCoDFish opened this pull request over 1 year ago

Logging-format json sometimes drops plaintext messages

isniukArte opened this issue over 1 year ago

Fix messageAppRoleAuthKeyRequired error message

fayvori opened this pull request over 1 year ago

Ingress HTTP solver does not get any class

drustan opened this issue over 1 year ago

Fix messageAppRoleAuthKeyRequired error message for Vault client

fayvori opened this pull request over 1 year ago

feat: allow changing the default Deployment revisionHistoryLimit

tberreis opened this pull request over 1 year ago

Use logging library with json support in cmctl (part 3)

inteon opened this pull request over 1 year ago

Write documentation for the new DNS-over-HTTPS feature

maelvls opened this issue over 1 year ago

Missing docs for #5337

inteon opened this issue over 1 year ago

Simplify flag and configfile parsing & add tests

inteon opened this pull request over 1 year ago

Move logging options to webhook config file

inteon opened this pull request over 1 year ago

Restructure the controller configfile

inteon opened this pull request over 1 year ago

Add view permission to all resources to cluster-reader aggregated cluster role

erikgb opened this pull request over 1 year ago

API docs state an out-of-date minimum time before renewal

staschuk-auvik opened this issue over 1 year ago

Add view permission to all resources to cluster-reader aggregated cluster role

erikgb opened this issue over 1 year ago

cattle-cluster-agent error: x509: certificate signed by unknown authority with Letsencrypt

naivefun opened this issue over 1 year ago

Fix 3 Prisma Vulnerabilities

pmerrison opened this pull request over 1 year ago

Release of the Version 1.10.3

tiwalter opened this issue over 1 year ago

Annual OWNERS review (2023)

maelvls opened this issue over 1 year ago

cert-manager DDoSes DNS-01 solver - infinite rate limiting

maaft opened this issue over 1 year ago

Race condition when two identical certificate requests are made from different clusters

pedrohdz opened this issue over 1 year ago

Issue 5514 read cabundle from kube objects - design doc

AppalaKarthik opened this pull request over 1 year ago

Bump k8s.io dependencies

lucacome opened this pull request over 1 year ago

helm: Update Chart.template.yaml - add apache 2.0 license

arukiidou opened this pull request over 1 year ago

Option to store certificate history in individual secrets

Jamstah opened this issue over 1 year ago

Update go-restful to fix PRISMA-2022-0227

pmerrison opened this pull request over 1 year ago

ACME ClusterIssuer/Issuer account registration is broken starting with v1.12.0

alex1989hu opened this issue over 1 year ago

[release-1.12] Bump go to latest patch release

jetstack-bot opened this pull request over 1 year ago

Fix indentation of Webhook NetworkPolicy matchLabels

ubergesundheit opened this pull request over 1 year ago

[release-1.11] Bump go to latest patch release

SgtCoDFish opened this pull request over 1 year ago

Bump go to latest patch release

SgtCoDFish opened this pull request over 1 year ago

High memory and CPU consumption in cert-manager-cainjector

DinStamou opened this issue over 1 year ago

Request to Upgrade github.com/docker/docker and github.com/docker/distribution to Address CVE-2023-28840 & CVE-2023-2253

szeyit opened this issue over 1 year ago

The default `Cluster Resource Namespace` is `kube-system`, not `cert-manager`

FushuWang opened this issue over 1 year ago

Unable to install cert-manager with argo-cd because helm chart is v1

xrl opened this issue over 1 year ago