github.com/cert-manager/cert-manager issues | Ecosyste.ms: OpenCollective

Intermittient DNS problem: networking error looking up CAA for xxx

jan-kantert opened this issue 12 months ago

Auto generate Helm docs

ThatsMrTalbot opened this pull request 12 months ago

[helm] Support custom spec.namespaceSelector for webhooks

jkroepke opened this pull request 12 months ago

[Release v1.14.0-alpha.1] Update cmd/cmctl's go.mod to v1.14.0-alpha.1

wallrj opened this pull request 12 months ago

Certificates disappear from AKS cluster

kaajrot opened this issue 12 months ago

Require feature gate in otherName SAN cert e2e

SpectralHiss opened this pull request 12 months ago

Error from server: request to convert CR from an invalid group/version: cert-manager.io/v1alpha2

amitgithub12345 opened this issue 12 months ago

Vault Issuer: The CA full chain is not included into the ca.crt

Smana opened this issue 12 months ago

Use ParseRevocationList instead of deprecated x509.ParseCRL

wallrj opened this pull request 12 months ago

[release-1.13] bump go to latest patch version

SgtCoDFish opened this pull request 12 months ago

[release-1.12] bump go to latest patch version

SgtCoDFish opened this pull request 12 months ago

Bump go to latest version

SgtCoDFish opened this pull request 12 months ago

Stop using deprecated f.environment.ControlPlane.KubeCtl function

wallrj opened this pull request 12 months ago

The cainjector does not seem to be running

Kaushikvenkatraj opened this issue 12 months ago

Terraform helm provider Chart.yaml file missing

sarg3nt opened this issue 12 months ago

cainjector not creating/updating Secrets after root CA rotation

reedflinch opened this issue 12 months ago

Revert "crd-labels"

ssyno opened this pull request 12 months ago

`make update-licenses` is non-deterministic.

wallrj opened this issue 12 months ago

DNS01 Challenge in pending state - Challenge events are empty

tejaswinieswar opened this issue 12 months ago

Other name change detection

SpectralHiss opened this pull request almost 1 year ago

feat: limit the size of the body read back from http requests

ThatsMrTalbot opened this pull request almost 1 year ago

Hef/missed other name changes

SpectralHiss opened this pull request almost 1 year ago

[release-1.14-alpha] Certificate is not renewed when changing OtherName/ NameConstraints

inteon opened this issue almost 1 year ago

Certificate Issue in Bare metal server - http01

SalihAinqa opened this issue about 1 year ago

HTTP01 Config Map Challenge Flow

Luwdo opened this issue about 1 year ago

feat: Add the ability to communicate with Vault via mTLS

rodrigorfk opened this pull request about 1 year ago

Add the ability to communicate with Vault via mTLS when strict client certificates is enabled at Vault server side

rodrigorfk opened this issue about 1 year ago

[release-1.13] Don't extract vendored go in _bin/downloaded folder

jetstack-bot opened this pull request about 1 year ago

[release-1.12] Don't extract vendored go in _bin/downloaded folder

jetstack-bot opened this pull request about 1 year ago

[release-1.13] Fix bug in CertificateOwnsSecret and add unit test

jetstack-bot opened this pull request about 1 year ago

Add startupapicheck image to the server bundle of `make release`

wallrj opened this pull request about 1 year ago

Fix bug in CertificateOwnsSecret and add unit test

inteon opened this pull request about 1 year ago

Deprecate URLsFromStrings which is only used in other deprecated functions

inteon opened this pull request about 1 year ago

Replace util contains function with slices.Contains

inteon opened this pull request about 1 year ago

Use k8s.io/apimachinery/pkg/util/sets for FeatureSet

inteon opened this pull request about 1 year ago

Use generics for mustAllSync variants

inteon opened this pull request about 1 year ago

Improve CertificateOwnsSecret

inteon opened this pull request about 1 year ago

Cert manager not retrying after initial issuance is failed

Chil49 opened this issue about 1 year ago

Stop using deprecated hashicorp/vault/api RawRequest functions

wallrj opened this pull request about 1 year ago

Ignore warnings about deprecated eab.KeyAlgorithm field

wallrj opened this pull request about 1 year ago

Don't extract vendored go in _bin/downloaded folder

inteon opened this pull request about 1 year ago

Use io instead of deprecated ioutil package

wallrj opened this pull request about 1 year ago

The startupapicheck image isn't published to quay.io, so the standard Helm install fails.

wallrj opened this issue about 1 year ago

Use sets instead of custom util function

inteon opened this pull request about 1 year ago

[Release v1.14.0-alpha.0] Update cmd/cmctl's go.mod to v1.14.0-alpha.0

wallrj opened this pull request about 1 year ago

Waiting for DNS-01 challenge propagation: DNS record for 'hmccloud.com' not yet propagated.

tom-m-tan opened this issue about 1 year ago

Use slices go library

inteon opened this pull request about 1 year ago

Add tests for the improvements made in #6561

inteon opened this pull request about 1 year ago

Release cert-manager v1.14.0

wallrj opened this issue about 1 year ago

Don't return in validation, use else block instead

inteon opened this pull request about 1 year ago

Rename UseCertificateRequestNameConstraints to NameConstraints

inteon opened this pull request about 1 year ago

`global.logLevel` is not documented in the Helm README file

wallrj opened this issue about 1 year ago

Bump dependencies

inteon opened this pull request about 1 year ago

Replace calls to deprecated sets.String functions

wallrj opened this pull request about 1 year ago

Deprecate RandStringBytes and RandStringRunes

wallrj opened this pull request about 1 year ago

Consolidate duplicate functions: `RandStringRunes` and `RandStringBytes`

wallrj opened this issue about 1 year ago

Upgrade base images from debian11 to debian12

inteon opened this pull request about 1 year ago

Enable gosec 404: Use of weak random number generator

wallrj opened this pull request about 1 year ago

Enable gosec G501: Blocklisted import crypto/md5

wallrj opened this pull request about 1 year ago

Warn users not to use insecure TSIG algorithms when using DNS UPDATE and ACME DNS01

wallrj opened this issue about 1 year ago

Enable gosec G505: Blocklisted import crypto/sha1

wallrj opened this pull request about 1 year ago

CVE: upgrade golang.org/x/crypto

inteon opened this pull request about 1 year ago

api server request get through the proxy in cert manager

ahmadgh9 opened this issue about 1 year ago

Allow customizing labels copied from ingresses to certificates

kwohlfahrt opened this pull request about 1 year ago

docs: declare updated kube version in artifact hub doc

dylanhitt opened this pull request about 1 year ago

feat: add tls to metrics endpoint

ThatsMrTalbot opened this pull request about 1 year ago

Attempting to update Cert-Manager through TrueNAS via TrueCharts repository

BeatSpark opened this issue about 1 year ago

DNS01 challenge propagation check failed

hollanbm opened this issue about 1 year ago

Fix validation webhook error message

pevidex opened this pull request about 1 year ago

Add documentation for istio-csr and ingress with istio

cccsss01 opened this issue about 1 year ago

Update Certificates with Ingress annotations

anothertobi opened this pull request about 1 year ago

Add @ThatsMrTalbot to OWNERS as reviewer

ThatsMrTalbot opened this pull request about 1 year ago

fix: validation functions are not called anywhere

ThatsMrTalbot opened this pull request about 1 year ago

Make Service Port and Webhook Service Port Configurable in Helm Chart

pierreblais opened this issue about 1 year ago

Hide deprecated CLI flags

inteon opened this pull request about 1 year ago

fix: normalise install flags to match other commands

ThatsMrTalbot opened this pull request about 1 year ago

Certificate chain parsing

inteon opened this pull request about 1 year ago

Update gateway-api to v1

ThatsMrTalbot opened this pull request about 1 year ago

Add TLS support for /metrics prometheus server

eanveden opened this issue about 1 year ago

ImagePullBackOff error Failed to pull image "quay.io/jetstack/cert-manager-controller:v1.13.3": x509: certificate signed by unknown authority

jinyuanpeng opened this issue about 1 year ago

Add target + installation for golangci-lint

SgtCoDFish opened this pull request about 1 year ago

Fix licenses file

SgtCoDFish opened this pull request about 1 year ago

Intermediate certificate is not updated in child certificates

MatthiasWerning opened this issue about 1 year ago

Update Certificate API definition on key length

Jiawei0227 opened this issue about 1 year ago

Add flag and field to customize leaf duration on dynamic certificates

allenmunC1 opened this pull request about 1 year ago

Fix gosec G601: Implicit memory aliasing of items from a range statement

wallrj opened this pull request about 1 year ago

PCA Root PEM + Chain added to cert manager results in duplicate/repeated root CA in chain.

kuberkaul opened this issue about 1 year ago

Add separate startupapicheck binary

SgtCoDFish opened this pull request about 1 year ago

New option to specify encryption and MAC algorithms for PKCS#12 keystores.

snorwin opened this pull request about 1 year ago

[Release v1.12.7] Update cmd/cmctl's go.mod to v1.12.7

wallrj opened this pull request about 1 year ago

Release cert-manager v1.12.7

wallrj opened this issue about 1 year ago

Bump Go to 1.21.5

wallrj opened this pull request about 1 year ago

[release-1.13] Bump to go 1.20.12

wallrj opened this pull request about 1 year ago

[release-1.12] Bump to go 1.20.12

wallrj opened this pull request about 1 year ago

fix: structure of nameconstraint in CSR

tanujd11 opened this pull request about 1 year ago

keyUsage extension may be empty

AlexanderS opened this issue about 1 year ago

[Release v1.13.3] Update cmd/cmctl's go.mod to v1.13.3

wallrj opened this pull request about 1 year ago

[release-1.12] Mitigate potential Slowloris attacks by setting ReadHeaderTimeout in all http.Server instances

wallrj opened this pull request about 1 year ago

[release-1.13] Mitigate potential Slowloris attacks by setting ReadHeaderTimeout in all http.Server instances

wallrj opened this pull request about 1 year ago

Add the golangci-lint GitHub action

wallrj opened this pull request about 1 year ago