github.com/cert-manager/cert-manager issues | Ecosyste.ms: OpenCollective

How do I solve acme: authorization 403 error when setting up Ingress on Minikube

edtshuma opened this issue over 1 year ago

Vault test code cleanliness improvements

inteon opened this pull request over 1 year ago

Harden containers with read-only root filesystems

sigv opened this issue over 1 year ago

Add --concurrent-workers flag to cert-manager controller

inteon opened this pull request over 1 year ago

Fix update-licenses make target

inteon opened this pull request over 1 year ago

Use high QPS, Burst, ConcurrentWorkers, ginkgo nodes values for faster e2e tests

inteon opened this pull request over 1 year ago

Remove ioutil

inteon opened this pull request over 1 year ago

OwnerReference be added to the privateKeySecretRef secret created by the ACME ClusterIssuer and Issuer

perlinger opened this issue over 1 year ago

Use readOnlyRootFilesystem: true for all containers

jemag opened this issue over 1 year ago

cert-manager issue.. SSL is on and off

Raksha-CPU opened this issue over 1 year ago

Cert-manager Controller Not Recognizing Delegated Domain Record

BTS-SealStorage opened this issue over 1 year ago

"context deadline exceeded" while "applying Secret data"

roy-work opened this issue over 1 year ago

Waiting for DNS-01 challenge propagation: DNS record for mydomain.com not yet propagated

droslean opened this issue over 1 year ago

Preventing cert-manager from attempting DNS01 challenges using rewritten domains instead of ingress domains

dr4Ke opened this issue almost 2 years ago

Support Azure Private DNS Zones for DNS Challenge

patst opened this issue almost 2 years ago

Looking for documentation explaining how the connectino between istio-csr and cert-manager is secured

bkirchmann-raft opened this issue almost 2 years ago

Reduce the amount of ACME calls during issuance

irbekrm opened this pull request almost 2 years ago

[FR] Allow the Chart to create extra manifest

pierluigilenoci opened this issue almost 2 years ago

Flaky test: make: pull-cert-manager-master-make-test: [make/test.mk:136: _bin/scratch/oldcrds.tar] Error 123

wallrj opened this issue almost 2 years ago

"cert-manager.io/alt-names" annotation under Ingress resources

ruiengana opened this issue almost 2 years ago

Helm chart only partly supports serving certificates

vladimirtiukhtin opened this issue almost 2 years ago

Route53 challenge with IRSA service account: Unable to assume role: AccessDenied

nathan-bowman opened this issue almost 2 years ago

Investigate OpenFeature for Feature Gates

agardnerIT opened this issue almost 2 years ago

cainjector in a zombie state after attempting to shut down

AcidLeroy opened this issue almost 2 years ago

argocd + cert-manager + ingress_nginx + acme-http-solver cannot issue standalone certificate

heroes1412 opened this issue almost 2 years ago

Issue with Cloudflare dns-01 acme validation for Let's Encrypt in a multi-cluster environment

jomartin1191 opened this issue almost 2 years ago

Will cert manager auto refresh Vault AppRole Auth token?

wjf3121 opened this issue almost 2 years ago

Duplicate events

wallrj opened this issue almost 2 years ago

Whats the impact of removing the auto mount of access token for cert manager service accounts.

ghost opened this issue almost 2 years ago

Separate binaries/tests into separate modules with minimal dependencies

SgtCoDFish opened this pull request almost 2 years ago

Deprecate klog flags and add a deprecation message

maelvls opened this pull request almost 2 years ago

Adding Domains.Google.com as an option for DNS-01

JohnnySixStrings opened this issue almost 2 years ago

helm: add support for TLS configuration and application protocol

jsievenpiper opened this pull request almost 2 years ago

Cleanup certificate request approval webhook

inteon opened this pull request almost 2 years ago

cert-manager failing to generate certificate in kubernetes, how to fix that?

ukreddy-erwin opened this issue almost 2 years ago

Controller can't handle hitting request rate limits of zerossl ACME API

hnicke opened this issue almost 2 years ago

Certmgr allows creating certificates expiring after ca expiration.

McSlow opened this issue almost 2 years ago

Cert manager - for 'Keyfactor' based certificates

krishnakc1 opened this issue almost 2 years ago

http01.ingress.class doesn't work

ferronsw opened this issue almost 2 years ago

cert manager API showing error - "x509: certificate has expired or is not yet valid"

Veritasosrb opened this issue almost 2 years ago

Fix helm loglevel parsing

ChrisDevo opened this pull request almost 2 years ago

DNS-01 : error : Found recursive CNAME record to

juchom opened this issue almost 2 years ago

A potential risk in cert-manager which can be levereaged to make cluster-level privilege escalation

younaman opened this issue almost 2 years ago

CA cert in Secret not updated when self-signed CA itself gets renewed.

TimJones opened this issue almost 2 years ago

error when creating "test1": Internal error occurred: failed calling webhook "webhook.cert-manager.io": failed to call webhook: Post "https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s": EOF

hmi12 opened this issue almost 2 years ago

Add the ingressClassName field to the Issuer and ClusterIssuer resources to support the ingressClassName from Ingress v1

maelvls opened this pull request almost 2 years ago

WIP: Design: core-issuers

SgtCoDFish opened this pull request almost 2 years ago

Failed to create certificate for my domain

Feezan-Khattak opened this issue almost 2 years ago

Error presenting challenge: Unable to check the TXT record: ### Unexpected HTTP status: 401 during certificate renewal

ssword62 opened this issue almost 2 years ago

Error when trying to create a ClusterIssuer object

MTheusRodrigues opened this issue almost 2 years ago

Design: Go Module Proliferation

SgtCoDFish opened this pull request almost 2 years ago

Limit to number of entities (Certificates & CertRequets)?

nikolayg opened this issue almost 2 years ago

Setting logLevel to 0 (as integer) in helm chart values doesn't render into container args

ChrisDevo opened this issue almost 2 years ago

Move `cmd/util/` to `internal/cmd/util/`

inteon opened this pull request almost 2 years ago

Removed unused NewCertManagerWebhookServer function argument

inteon opened this pull request almost 2 years ago

WIP: ocsp stapling for certificates

sebltm opened this pull request almost 2 years ago

Enable Alpha & Beta features in local e2e and update comments

inteon opened this pull request almost 2 years ago

Add support for json logging format

malovme opened this pull request almost 2 years ago

[HELP] "DeltaFIFO Pop Process" - Reason:slow event handlers blocking the queue

wijdendal opened this issue almost 2 years ago

Controller partial metadata

irbekrm opened this pull request almost 2 years ago

Make it possible to split a cert-manager installation over multiple Helm releases.

FR-Solution opened this pull request almost 2 years ago

Allow renewBefore to be a percentage

cbroglie opened this issue almost 2 years ago

Uninstalling the cert-manager Helm chart removes all my Issuers and Certificate/ CertificateRequest CRs

inteon opened this issue almost 2 years ago

Handle uname on linux/arm64

SgtCoDFish opened this pull request almost 2 years ago

Ability to reference EAB key secret in other namespaces

InsomniaCoder opened this issue almost 2 years ago

Certificate.Spec.secretTample.annotations are not reflected in the secret created

utkarsh079 opened this issue almost 2 years ago

CA Injector MinimumReplicasUnavailable

MarkEhler opened this issue almost 2 years ago

Use jetstack vcert fork to properly reset on TPP error

inteon opened this pull request almost 2 years ago

Set the User-Agent for cert-manager including version

hawksight opened this issue almost 2 years ago

Sometimes the tls-secret cannot be found by the nginx ingress

zadigus opened this issue almost 2 years ago

kubectl apply error couldn't get resource list for external.metrics.k8s.io/v1beta1: Got empty response for: external.metrics.k8s.io/v1beta1

scheung38 opened this issue almost 2 years ago

`helm show crds` does not show cert-manager CRDs

thevops opened this issue almost 2 years ago

Helm CVE-2023-25165

glaubitz opened this issue almost 2 years ago

TPP using user/pass forces the deprecated method

SpectralHiss opened this issue almost 2 years ago

Add 6443/TCP to webhook egress NetworkPolicy

ExNG opened this pull request almost 2 years ago

Store OCSP response in kubernetes secret

lukbuc opened this issue almost 2 years ago

After migration from 1.6.1 to 1.8.2 cainjector remains in crashloopbackoff - OOMKill

hajdukda opened this issue almost 2 years ago

Add k8s.io/client-go/applyconfigurations style *ApplyConfigurations for the included CRDs

EraYaN opened this issue almost 2 years ago

Misleading error for Vault issuer

amcginlay opened this issue almost 2 years ago

error instantiating route53 challenge solver: unable to assume role: AccessDenied

oleg-ku-32768 opened this issue almost 2 years ago

cloudDNS 's hostedZoneName is not sufficient to replace the dns01-recursive-nameservers flag

hongkailiu opened this issue almost 2 years ago

[helm] Add support for relabelings and metricRelabelings an serviceMonitor

jkroepke opened this pull request almost 2 years ago

helm: Add option to keep CRDs when helm chart is uninstalled

jwitko opened this pull request almost 2 years ago

Add descriptions for container image repos

SgtCoDFish opened this issue almost 2 years ago

add support for encrypted Private keys in PKCS8 format

gsustek opened this issue almost 2 years ago

Develop new Helm chart for cert-manager CRD manifests

vadim-a-nesterov opened this issue almost 2 years ago

Certificate issue problems not reported back to user, Ingress `status` field does not show errors

davidgubler opened this issue almost 2 years ago

force renew others when root cert renews

sasakiyori opened this issue almost 2 years ago

Cainjector limit controllers

irbekrm opened this pull request almost 2 years ago

feat: Add option to allow filtering DNS Names by ACME Challenge solvers

MBcom opened this pull request almost 2 years ago

Challenge is stuck at "Waiting for DNS-01 challenge propagation"

myeong01 opened this issue almost 2 years ago

Disable auto mount service account token in the ACME HTTP01 pod

wallrj opened this pull request almost 2 years ago

Waiting for HTTP-01 challenge propagation: wrong status code '404', expected '200'

Mathie01 opened this issue almost 2 years ago

Wildcard DNS domains and `cnameStrategy: Follow` don't work nicely together

tete17 opened this issue almost 2 years ago

Tag associated with Fix for pavlo-v-chernykh/keystore-go library version

a-cool-train opened this issue almost 2 years ago

BUGFIX: if a LiteralSubject is set, the RequestMatchesSpec function does skip too many checks

inteon opened this pull request almost 2 years ago

Remove the double cache mechanism for cainjector

irbekrm opened this pull request almost 2 years ago

Add MaxPathLen and add EncodeBasicConstraintsInRequest option to Certificate and CertificateRequest resources

inteon opened this pull request almost 2 years ago

Log which alpha/beta feature gates are enabled on controller and webhook startup

irbekrm opened this issue almost 2 years ago

Use fake kube apiserver version when generating helm template in cmctl x install

irbekrm opened this pull request almost 2 years ago