github.com/cert-manager/cert-manager issues | Ecosyste.ms: OpenCollective

Certificate renewal fails during DNS challenge with Route53

maxdebayser opened this issue almost 2 years ago

Cert Manager working with only example.com not with svc.cluster.local

amarflybot opened this issue almost 2 years ago

feat: added custom endpoint override flag for http solver

JamesMarino opened this pull request almost 2 years ago

Support for issuing public certs using AWS ACM and DNS verification

migueleliasweb opened this issue almost 2 years ago

Support PodSecurityAdmission

tspearconquest opened this issue almost 2 years ago

Add missing healthz port to PSP in Helm Chart when hostNetwork is used

rikkic opened this pull request almost 2 years ago

Error presenting challenge: init sdk: get token: extract secret: resource name may not be empty

venomone opened this issue about 2 years ago

Added the ability to disable controllers via helm

waterfoul opened this pull request about 2 years ago

Added the ability to set volumes and volumeMounts to all pods via helm

waterfoul opened this pull request about 2 years ago

Allow defining keystore password as litteral instead of SecretRef

rquinio1A opened this issue about 2 years ago

Error: INSTALLATION FAILED: failed post-install: timed out waiting for the condition

n9 opened this issue about 2 years ago

Experimental make targets for pushing images to a Docker registry and redeploying cert-manager

wallrj opened this pull request about 2 years ago

AdditionalOutputFormat is still in alpha

Maydaer opened this issue about 2 years ago

provider rfc2136: updates are sent to wrong dns zone

volker-raschek opened this issue about 2 years ago

Helm: Allow configuration of readiness, liveness and startup probes for all created Pods

djessich opened this issue about 2 years ago

Allow Gateway API feature to be enabled in clusters that don't have GWAPI CRDs installed

irbekrm opened this issue about 2 years ago

Integrate cert-manager with DigitalOcean LBs

atmosx opened this issue about 2 years ago

ACME HTTP challenge pods blocked by OpenShift

vinzent opened this issue about 2 years ago

Unable to inject linkerd sidecar proxy to Cert-Manager pods

yavuz7141 opened this issue about 2 years ago

Configure cluster resource namespace in ClusterIssuer spec

bitscuit opened this issue about 2 years ago

--must-staple attribute for OCSP Stapling

cheslijones opened this issue about 2 years ago

"propagation check failed" for DNS-01 ACME challenge on internal EKS-cluster

kobethuwis opened this issue about 2 years ago

ClusterIssuer cannot read the ServiceAccount token secret

shubb30 opened this issue about 2 years ago

Mounting emptyDir to /tmp directory (webhook)

mila-rodriguez-netapp opened this issue about 2 years ago

Improve gen.CSR and use it in all tests

inteon opened this pull request about 2 years ago

Certificates: preventing CertificateRequest creation runaway

JoshVanL opened this pull request about 2 years ago

upload Helm charts to OCI registry and sign them with cosign

developer-guy opened this issue about 2 years ago

error instantiating route53 challenge solver: unable to assume role: AccessDenied:

prem9966 opened this issue about 2 years ago

Fixing CA flag in basic constraints extension

sathyanarays opened this pull request about 2 years ago

Changelog annotations to chart

omBratteng opened this issue about 2 years ago

Unable to set IPv6 podDNS config from values

samip5 opened this issue about 2 years ago

Added support for using env config for configuring Vault issuer.

nuttmeister opened this pull request about 2 years ago

cert-manager v1.10.0 always tries to access clusterissuers at cluster scope

dghubble opened this issue about 2 years ago

Forbidden: seccomp may not be set pod.metadata.annotations

auwaerter opened this issue about 2 years ago

stuck on propagation check failed DNS record not yet propagated

rgl opened this issue about 2 years ago

Venafi Issuer Read `caBundle` from Configmap or Secret

hawksight opened this issue about 2 years ago

The vault issuer can now be given a serviceAccountRef instead of relying on static service account tokens

maelvls opened this pull request about 2 years ago

Failed to create CertificateRequest: admission webhook "webhook.cert-manager.io" denied the request

eravindar12 opened this issue about 2 years ago

Aggressive Retries from "error instantiating route53 challenge solver"

pquerna opened this issue about 2 years ago

log more information on why the get CertificateRequest request failed

inteon opened this pull request about 2 years ago

Implement support for hooks that get triggered after issuing or renewing certificates

grafanalf opened this issue about 2 years ago

Route53 solver's STS certificate chain is not being trusted by the cert-manager pod

aneeshargit opened this issue over 2 years ago

Could not determine authoritative nameservers for \"_acme-challenge.XXX.com.

pbxqdown opened this issue over 2 years ago

Add kind 1.25

inteon opened this pull request over 2 years ago

Support assuming role for route53 in AWS China (and other partitions)

Iced-Sun opened this issue over 2 years ago

Update Azure SDK and remove deprecated autorest dependency

phillebaba opened this pull request over 2 years ago

Gateway API exist, still getting error "the Gateway API CRDs do not seem to be present"

agarwalvishakha18 opened this issue over 2 years ago

Allow extra DNS-01 propagation time to be configured

sclevine opened this pull request over 2 years ago

Allow concurrent same-FQDN DNS-01 challenges when using route53

sclevine opened this pull request over 2 years ago

Support certs that live for < 1h

dblackdblack opened this issue over 2 years ago

Improving DNS-01 challenge performance

sclevine opened this issue over 2 years ago

High Availability for workloads

davi5e opened this issue over 2 years ago

Security compliance check for cert-manager as per CIS Benchmark

ssivasankarrao opened this issue over 2 years ago

[Helm chart] Cert-manager's metrics are not collected by default

lonelyCZ opened this issue over 2 years ago

Add SkipTLSVerify option to Vault issuer

zachfi opened this pull request over 2 years ago

Add topologySpreadConstraints to helm chart

stek29 opened this pull request over 2 years ago

Generate applyconfigurations and Apply functions

inteon opened this pull request over 2 years ago

Upgrade gateway api to v0.5.0

inteon opened this pull request over 2 years ago

Allow config of http01 solver pod security context

aidy opened this pull request over 2 years ago

Apply go fmt for go1.19

inteon opened this pull request over 2 years ago

Allow ECDSA for ACME client keys

jmleddy opened this pull request over 2 years ago

Upgrade to Ginkgo v2

inteon opened this pull request over 2 years ago

Support loading controller configuration from a versioned file

AcidLeroy opened this pull request over 2 years ago

Create 20220720-per-certificate-owner-ref.md

maelvls opened this pull request over 2 years ago

Complete the Migration Away From Jetstack Names

SgtCoDFish opened this issue over 2 years ago

Allow changing acmesolver pod SecurityContext

SgtCoDFish opened this issue over 2 years ago

cert-manager-webhook deployment spontaneously deleted

taylorsmithgg opened this issue over 2 years ago

GKE: cm-acme-http-solver triggers `no.scale.down.node.pod.not.backed.by.controller` due to lack of `PodDisruptionBudget` / `safe-to-evict` annotation

jsoref opened this issue over 2 years ago

In Gateway API mode, with 5+ challenge-solvers in one certificate, provisioning fails

Venryx opened this issue over 2 years ago

fix: update kyverno version, policy.yaml and securityContexts

joebowbeer opened this pull request over 2 years ago

Timeouts on Every Controller Reconcile Loop

SgtCoDFish opened this issue over 2 years ago

Add option to select CADN from yaml file for Venafi TPP requests

Alex-1801 opened this issue over 2 years ago

Investigate improving resource consumption and performance in clusters with large amount of resources

irbekrm opened this issue over 2 years ago

Add relabeling in cert-manager serviceMonitor

lenglet-k opened this issue over 2 years ago

Question about tolerations

schelv opened this issue over 2 years ago

cert-manager-webhook to provide logs when handling a k8s api-server request

consideRatio opened this issue over 2 years ago

Post "https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s": context deadline exceeded

klepiz opened this issue over 2 years ago

TPP Allowed Domains can cause valid certificate to error

hawksight opened this issue over 2 years ago

Waiting on certificate issuance from order cert-manager: "pending"

vyom-soft opened this issue over 2 years ago

Support loading controller configuration from a versioned file

irbekrm opened this issue over 2 years ago

Added certificate owner ref field

RomanenkoDenys opened this pull request over 2 years ago

topologySpreadConstraints support in helm chart

stek29 opened this issue over 2 years ago

WIP: Only remove the cleanup finalizer if the cleanup succeeds

wallrj opened this pull request over 2 years ago

Intermediate certificate is not updated in child certificate

smirnov-vs opened this issue over 2 years ago

Add relabeling and metricRelabelings settings for ServiceMonitor.

lftgl opened this pull request over 2 years ago

Race condition between issuers, certificates, and secrets

allanadair opened this issue over 2 years ago

Error presenting challenge: the server could not find the requested resource even though resource exists

DerKnerd opened this issue over 2 years ago

Threat model for cert-manager

irbekrm opened this issue over 2 years ago

certificate not renewed for ingress with multiple hosts and http01-edit-in-place

hostalp opened this issue over 2 years ago

propagation check failed: DNS record for xxx not yet propagated

SamDecrock opened this issue over 2 years ago

ValidateCAA test function is flaky

davidsbond opened this issue over 2 years ago

Wrong nameserver for vault clusterissuer

kevinvalleau opened this issue over 2 years ago

Implement the DNS-over-HTTPS check

FlorianLiebhart opened this pull request almost 3 years ago

Add ability to provide literal subject to Certificate

spockz opened this pull request almost 3 years ago

Verification on 1.7.2 fails (Kubectl apply)

mamercad opened this issue almost 3 years ago

Successful challenge request, but no certificate

Amgatto opened this issue almost 3 years ago

Overhaul the DNS01 solver

jakexks opened this issue almost 3 years ago

cert-manager created multiple CertificateRequest objects with the same certificate-revision

jayme-github opened this issue almost 3 years ago

General flakiness of our end-to-end suite

maelvls opened this issue almost 3 years ago

Failed to perform self check GET request

Lazzu opened this issue almost 3 years ago