queue to be emptied once a day
Unprioritized issues older than 7 days (138)
Resolution: Add a priority/ or triage/ label
Average age: 108.1d, Avg wait: 54.5d
Uncommented older than 7 days (99)
Resolution: Add a priority/ or triage/ label
Average age: 124.9d, Avg wait: 120.2d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 3909 |  |
Make wait time configurable when creating route53 challenge |
2
|
3mo | 3mo | 3mo |
area/acme/dns01
kind/feature
priority/important-longterm
|
recv
|
|||
| 3898 |  |
Allow setting PodDisruptionBudget policies via helm chart | 3mo | 3mo | 3mo |
area/deploy
kind/feature
priority/important-longterm
|
pr-new-commits recv
|
||||
| 3825 |  |
restoring parallel setup behaviour for e2e tests | 3mo | 3mo | 3mo |  |
good first issue
help wanted
kind/feature
priority/important-longterm
|
recv
|
|||
| 3780 |  |
WSL2 support or is there an existing process in place? | 4mo | 2mo | 4mo |
kind/feature
priority/backlog
|
recv
|
||||
| 3777 |  |
Non-compliant behaviour: re-POSTing challenge instead of polling authorization | 4mo | 2d | 4mo |   |
kind/bug
priority/awaiting-more-evidence
|
recv recv-q
|
|||
| 3729 |  |
Possible Bug in RFC2136? Or Missconfiguration? | 4mo | 3mo | 4mo |
triage/support
|
recv
|
||||
| 3711 |  |
Export issued cert into AWS ACM |
3
|
4mo | 3mo | 4mo |  |
kind/feature
priority/backlog
|
recv
|
||
| 3675 |  |
Donation of jniebuhr/aws-pca-issuer to the Cert Manager project |
2
6
|
5mo | 2mo | 5mo |    |
kind/documentation
kind/feature
priority/backlog
|
recv
|
||
| 3655 |  |
Specify Name Constraints in CA Certificate | 5mo | 2mo | 5mo |
kind/feature
priority/backlog
|
recv
|
||||
| 3653 |  |
install cert-manager: Readiness probe failed: HTTP probe failed with statuscode: 500 | 5mo | 2mo | 5mo |  |
kind/bug
triage/support
|
recv
|
|||
| 3615 |  |
resourceVersion should not be set on objects to be created |
8
|
5mo | 7wk | 5mo |      |
kind/bug
triage/needs-information
|
recv recv-q
|
||
| 3509 |  |
Provide a separate manifest for the cert-manager Namespace resource | 7mo | 5mo | 7mo |
kind/feature
priority/important-longterm
|
recv
|
||||
| 3445 |  |
Connection refused for cert-manager-webhook service |
2
|
8mo | 8mo | 8mo |  |
triage/support
|
recv recv-q
|
||
| 3377 |  |
CertManager does not install with default settings |
4
|
9mo | 5mo | 9mo |   |
kind/bug
priority/important-soon
|
recv recv-q
|
||
| 3020 |  |
Ability to convert resources in acme.cert-manager.io group | 1y | 1y | 1y |
kind/bug
priority/important-soon
|
recv
|
||||
| 2941 |  |
Detect multiple certs pointed to the same secret |
2
|
1y | 11mo | 1y | |
area/monitoring
kind/feature
priority/important-longterm
|
contributor-last recv
|
||
| 2926 |  |
Add an ability to communicate with Vault via mTLS | 1y | 1y | 1y |
area/vault
kind/feature
priority/important-longterm
|
recv
|
||||
| 551 |  |
Documentation on how to handle large-scale certificate management & best practices |
2
|
2mo | 2mo | 2mo |  |
help wanted
kind/documentation
priority/important-longterm
|
contributor-last recv
|
||
| 480 |  |
Secret gets UID added to end of name | 4mo | 3mo | 4mo | |
triage/support
|
contributor-last recv recv-q
|
|||
| 76 |  |
Upgrading from v0.10 to v0.11 - missing cainjector annotation | 2y | 11mo | 2y | |
kind/documentation
priority/backlog
|
contributor-last recv
|
|||
| 56 |  |
Route53: document use of "region" field | 2y | 3mo | 2y |  |
documentation
priority/important-longterm
|
contributor-last recv recv-q
|
|||
| 78 previously listed items omitted | |||||||||||
Important soon, but no updates in 90 days (36)
Resolution: Downgrade to important-longterm
Average age: 290.2d, Avg wait: 39.8d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 3904 |  |
Akamai Fast DNS should use V2 API and rename to Edge DNS | 
|
|
3mo | 3mo | 3mo | |
area/acme/dns01
kind/bug
kind/feature
priority/important-soon
|
assigned assignee-updated collaborator-last commented send
|
| 3852 |  |
Be able to specify a serviceAccount for the HTTP01 ACME solver pod
|
3mo | 3mo | 3mo |   |
kind/feature
priority/important-soon
|
collaborator-last commented pr-closed send similar
|
||
| 3848 |  |
Wildcard certificates not being resolved correctly. | 3mo | 3mo | 3mo | |
area/acme/dns01
kind/bug
priority/important-soon
|
collaborator-last commented send
|
||
| 3820 |  |
Controller fails to process new certs when there are a large number of pending ones | 3mo | 3mo | 3mo | |
kind/bug
priority/important-soon
|
collaborator-last commented send
|
||
| 3810 |  |
Certificates stuck issuing and unready after cert-manager restart | 4mo | 3mo | 3mo |  |
kind/bug
priority/important-soon
|
commented recv similar
|
||
| 3796 |  |
Intermittent E2E test failure: ERROR: 1 setup jobs failed. Check logs above for details
|
| 4mo | 3mo | 3mo | |
area/testing
good first issue
kind/flake
priority/important-soon
|
assigned assignee-updated collaborator-last commented pr-merged send
|
|
| 3761 | |
Document a security issue reporting, response, and distribution process
|
|
2
5
|
4mo | 3mo | 3mo | |
kind/documentation
kind/feature
priority/important-soon
|
assigned assignee-updated collaborator-last commented pr-merged send
|
| 3738 |  |
PKI: inject a time.Time in certificate template functions instead of using time.Now
|
| 4mo | 3mo | 3mo | |
kind/cleanup
priority/important-soon
|
assigned assignee-updated commented member-last pr-merged send
|
|
| 3704 | |
Document how to manually test cert-manager upgrade in release-process.md | 5mo | 3mo | 3mo | |
kind/documentation
priority/important-soon
|
commented member-last open-milestone
|
||
| 3672 | |
Change the package import path from jetstack/cert-manager to cert-manager/cert-manager | 5mo | 3mo | 3mo | |
kind/cleanup
priority/important-soon
|
collaborator-last commented pr-unreviewed send
|
||
| 3670 | |
Create testing infrastructure for the cert-manager org |
| 5mo | 3mo | 3mo | |
kind/cleanup
priority/important-soon
|
assigned assignee-updated commented member-last similar
|
|
| 3626 | |
Add Go package comments to all packages |
| 5mo | 3mo | 3mo | |
kind/cleanup
kind/documentation
priority/important-soon
|
assigned assignee-updated commented member-last send
|
|
| 3612 | |
CLI tool should have a dedicated backup and restore subcomand | 5mo | 5mo | 5mo | |
area/ctl
kind/feature
priority/important-soon
|
commented member-last send
|
||
| 3576 |  |
Cert-manager does not respect TTL |
2
|
6mo | 6mo | 6mo |  |
area/acme
area/acme/dns01
kind/feature
priority/important-soon
|
collaborator-last commented send
|
|
| 3555 | |
Venafi E2E tests are all failing
|
|
6mo | 5mo | 5mo |  |
area/testing
area/venafi
priority/important-soon
|
commented member-last pr-merged
|
|
| 3473 |  |
Draft a design for handling identity, policy, and certificates.k8s.io adoption |
| 8mo | 5mo | 8mo | |
kind/feature
priority/important-soon
|
assigned assignee-updated collaborator-last commented pr-merged pr-new-commits pr-reviewed-with-comment send
|
|
| 3455 |  |
updated certificate resource is not processed by cert-manager |
|
8mo | 8mo | 8mo | |
kind/bug
priority/important-soon
|
collaborator-last commented send similar
|
|
| 3451 | |
Move repo to cert-manager/cert-manager |
| 8mo | 3mo | 5mo | |
Epic
priority/important-soon
|
assigned assignee-updated commented member-last send
|
|
| 3435 |  |
Race condition while updating commonName |
|
8mo | 5mo | 5mo | |
kind/bug
priority/important-soon
|
commented member-last send
|
|
| 3377 | |
CertManager does not install with default settings |
4
|
9mo | 5mo | 9mo | |
kind/bug
priority/important-soon
|
recv recv-q
|
|
| 3371 |  |
Make deployment matchLabels configurable
|
9mo | 5mo | 9mo | |
kind/feature
priority/important-soon
|
collaborator-last commented pr-closed send
|
||
| 3188 | |
Add API compatibility tests |
|
|
11mo | 5mo | 5mo | |
area/api
kind/feature
priority/important-soon
|
assigned assignee-updated commented member-last open-milestone send
|
| 3145 | |
Ctl command status certificate: Output info about completed CRs | 11mo | 8mo | 8mo |  |
area/ctl
kind/feature
priority/important-soon
|
collaborator-last commented send
|
||
| 3050 | |
Venafi issuer produces a mixture of structured and unstructured log messages from the vcert library | 1y | 1y | 1y | |
area/venafi
kind/bug
priority/important-soon
|
collaborator-last commented send
|
||
| 3020 | |
Ability to convert resources in acme.cert-manager.io group | 1y | 1y | 1y |
kind/bug
priority/important-soon
|
recv
|
|||
| 2988 | |
vault: allowing asynchronous issuance of certificates | 1y | 11mo |
area/vault
kind/feature
priority/important-soon
|
|||||
| 2902 |  |
Cannot decrypt PKCS12 keystore |
3
|
1y | 1y | 1y |   |
kind/bug
priority/important-soon
|
commented recv recv-q
|
|
| 2461 |  |
rfc2136 failing with bad signature error |
|
2y | 1y | 1y |  |
kind/bug
priority/important-soon
|
collaborator-last commented send
|
|
| 1888 |  |
Certificate not matching private key when creating multiple ingress resources |
|
12
|
2y | 3mo | 3mo |    |
area/acme
good first issue
help wanted
kind/bug
priority/important-soon
|
assigned assignee-updated collaborator-last commented open-milestone send
|
| 459 |  |
cert manager is no longer on the OpenShift operator list |
| 4mo | 3mo | 4mo | |
priority/important-soon
|
assigned assignee-updated commented member-last send
|
|
| 262 |  |
[DOCS]: Add info on how to customize kind CertManager when using OperatorHub method on Openshift |
|
1y | 6mo | 1y | |
kind/feature
priority/important-soon
|
commented recv recv-q
|
|
| 229 | |
Documenting resolution for DigitalOcean + HTTP01 "connection timed out" error | 1y | 11mo | |
kind/documentation
priority/important-soon
|
contributor-last
|
|||
| 198 | |
Document release process |
| 1y | 11mo | 11mo | |
kind/documentation
priority/important-soon
|
assigned commented member-last send
|
|
| 174 |  |
Add documentation for CRD conversion webhook ca injection | 1y | 11mo | 11mo | |
help wanted
kind/documentation
priority/important-soon
|
commented member-last send
|
||
| 90 | |
Document Certificate Subject Changes | 2y | 6mo | 6mo |  |
good first issue
help wanted
priority/important-soon
|
collaborator-last commented similar
|
||
| 69 |  |
SelfSignedIssuer configuration - API reference docs | 2y | 11mo | 11mo | |
good first issue
help wanted
kind/documentation
priority/important-soon
|
commented member-last send
|
Important longterm, but no updates in 180 days (28)
Resolution: Downgrade to backlog
Average age: 468.4d, Avg wait: 73.3d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 3366 |  |
Export certificate controller sync call duration metrics |
|
9mo | 9mo | 9mo | |
kind/feature
priority/important-longterm
|
collaborator-last commented send
|
|
| 3350 | |
Venafi e2e tests: enable more features | 9mo | 9mo |
area/venafi
kind/cleanup
priority/important-longterm
|
collaborator-last similar
|
||||
| 3294 |  |
Certificate Not Found when secret quota exceeded | 10mo | 10mo | 10mo | |
kind/bug
priority/important-longterm
|
collaborator-last commented send
|
||
| 3291 | |
GitOps based e2e tests | 10mo | 8mo |
area/testing
kind/feature
priority/important-longterm
|
open-milestone
|
||||
| 3283 |  |
Passing apiVersion as apiGroup should give a validation error |
3
|
10mo | 9mo | 10mo |  |
area/api
kind/bug
priority/important-longterm
|
commented send
|
|
| 3181 |  |
as a user, I don't known that ACME HTTP01 solvers cannot be used for wildcard certs |
2
|
11mo | 11mo | 11mo |  |
area/acme
kind/feature
priority/important-longterm
|
commented recv
|
|
| 3067 | |
Reviewing 'minimum certificate duration' requirements and handling
|
1y | 9mo | 11mo | |
area/api
priority/important-longterm
|
collaborator-last commented open-milestone pr-closed pr-merged send
|
||
| 2998 |  |
Challenge failure metrics | 1y | 11mo | 11mo | |
area/acme
kind/feature
priority/important-longterm
|
collaborator-last commented send
|
||
| 2968 |  |
[Google: clouddns]Selected a private zone
|
1y | 11mo | 1y | |
area/acme/dns01
kind/bug
priority/important-longterm
|
commented contributor-last pr-merged recv
|
||
| 2941 | |
Detect multiple certs pointed to the same secret |
2
|
1y | 11mo | 1y | |
area/monitoring
kind/feature
priority/important-longterm
|
contributor-last recv
|
|
| 2926 | |
Add an ability to communicate with Vault via mTLS | 1y | 1y | 1y |
area/vault
kind/feature
priority/important-longterm
|
recv
|
|||
| 2894 |  |
Add configuration for what SANs are allowed based on namespace | 1y | 1y | 1y | |
kind/feature
priority/important-longterm
|
commented recv
|
||
| 2877 | |
E2E: [Conformance] Certificates with issuer type ACME DNS01 Issuer should issue a basic, defaulted certificate for a single commonName and distinct dnsName defined by an ingress with annotations | 1y | 1y | 1y |  |
area/acme
kind/flake
priority/important-longterm
|
commented recv-q
|
||
| 2817 |  |
cainjector fails to start: MutatingWebhookConfiguration not found | 1y | 1y | 1y |  |
area/deploy
kind/bug
priority/important-longterm
|
commented contributor-last recv-q send
|
||
| 2779 |  |
Support AWS Session Tokens |
|
1y | 1y | 1y | |
area/acme/dns01
help wanted
kind/feature
priority/important-longterm
|
collaborator-last commented send
|
|
| 2695 | |
Kubelet TLS using external signerName controllers |
| 1y | 1y | 1y | |
Epic
kind/feature
priority/important-longterm
|
assigned assignee-updated collaborator-last commented send
|
|
| 2617 | |
release-tars: allow plumbing through custom registry through to Helm chart & manifests | 1y | 1y |
area/deploy
kind/feature
priority/important-longterm
|
|||||
| 2572 | |
OpenAPI based field defaulting | 1y | 1y | 1y | |
area/api
kind/feature
priority/important-longterm
|
collaborator-last commented send
|
||
| 2488 |  |
Signed images | 2y | 1y | 1y | |
area/deploy
kind/feature
priority/important-longterm
|
collaborator-last commented send
|
||
| 2479 |  |
Allow CA issuers to generate their own secrets |
5
|
2y | 1y | 1y | |
area/ca
kind/feature
priority/important-longterm
|
collaborator-last commented send
|
|
| 2454 | |
RBAC rule for showing running cert-manager in a single namespaces | 2y | 1y |
area/deploy
kind/feature
priority/important-longterm
|
|||||
| 2377 |  |
Istio Node Agent Integration | 2y | 1y | 2y |  |
kind/feature
priority/important-longterm
|
commented recv-q send
|
||
| 2243 | |
Add a per-Certificate rate limit to the number of CertificateRequests created |
|
2y | 1y | 2y |   |
area/api
kind/feature
priority/important-longterm
|
commented
|
|
| 2178 | |
Handling 'unregistering' certificates from Venafi TPP |
2
|
2y | 7mo | 7mo |  |
area/venafi
kind/feature
lifecycle/frozen
priority/important-longterm
|
collaborator-last commented send
|
|
| 2043 | |
Extend end-to-end suite to record total ACME client request count | 2y | 1y |  |
area/testing
kind/feature
priority/important-longterm
|
open-milestone
|
|||
| 223 | |
Document wildcard certificate tutorial | 1y | 11mo | 1y | |
kind/documentation
priority/important-longterm
|
commented contributor-last send
|
||
| 178 |  |
Order of versions of cert-manager in menu | 1y | 11mo | 1y | |
kind/documentation
priority/important-longterm
|
commented contributor-last send
|
||
| 154 | |
Documenting repo management process | 1y | 11mo | 1y | |
kind/documentation
priority/important-longterm
|
commented contributor-last send
|
Pull Requests: Review Ready (13)
Resolution: Review requests or mark them as do-not-merge/work-in-progress
Average age: 52.0d, Avg wait: 34.5d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 4253 | |
Conversion: Apiextensions v1beta1 -> v1 | 11min | 9min |
approved
area/acme
area/acme/dns01
area/api
area/deploy
area/testing
dco-signoff: yes
kind/cleanup
release-note
size/L
|
collaborator-last open-milestone unreviewed
|
||||
| 4226 |  |
add 'kubectl cert-manager version' |
2
|
7d | 2d | 4d | |
dco-signoff: yes
needs-kind
ok-to-test
release-note
size/XXL
|
commented contributor-last recv reviewed-with-comment similar
|
|
| 4072 |  |
Add a name to Prometheus scraping service port for Istio compatibillity |
| 7wk | 5d | 7wk |  |
area/deploy
dco-signoff: yes
needs-kind
needs-ok-to-test
release-note
size/XS
|
assigned contributor-last recv recv-q unreviewed
|
|
| 4209 | |
Auto generate README.md & template Chart.yaml using tem | 12d | 10d | 10d | |
area/deploy
dco-signoff: yes
kind/feature
ok-to-test
release-note
size/XXL
|
commented contributor-last recv reviewed-with-comment similar
|
||
| 4161 | |
Update makefile | 3wk | 13d | 13d | |
approved
dco-signoff: yes
kind/cleanup
release-note-none
size/M
|
collaborator-last commented unreviewed
|
||
| 4199 | |
Auto generate README.md & template Chart.yaml | 16d | 14d | 15d | |
area/deploy
dco-signoff: yes
needs-kind
ok-to-test
release-note
size/XXL
|
commented contributor-last new-commits recv similar
|
||
| 4145 |  |
Allow additional namespaceSelector matchExpressions to be configured on ValidatingWebHook |
| 4wk | 17d | 4wk | |
area/deploy
dco-signoff: yes
kind/feature
ok-to-test
release-note
size/XS
|
assigned assignee-updated commented recv recv-q unreviewed
|
|
| 4050 |  |
explicitly specify port protocol field to allow server side apply |
| 2mo | 4wk | 2mo | |
area/deploy
dco-signoff: yes
needs-kind
needs-ok-to-test
release-note-none
size/XS
|
assigned recv recv-q unreviewed
|
|
| 4027 | |
bug: Don't sort json patch operations | 2mo | 2mo | 2mo | |
approved
dco-signoff: yes
kind/bug
ok-to-test
release-note-none
size/XS
|
commented contributor-last new-commits recv
|
||
| 545 | |
Update akamai.md | 2mo | 13d | 2mo | |
dco-signoff: yes
ok-to-test
size/M
|
commented recv reviewed-with-comment
|
||
| 451 |  |
update to ingress. | 5mo | 6wk | 5mo | |
dco-signoff: no
needs-ok-to-test
size/XS
|
contributor-last recv unreviewed
|
||
| 528 |  |
Update "Setting Nameservers for DNS01 Self Check" example | 3mo | 3mo | 3mo |
dco-signoff: yes
needs-ok-to-test
size/XS
|
contributor-last recv unreviewed
|
|||
| 35 | |
Sort versions when running "cmrel staged" and add cmrel staged --help |
2
|
1mo | 3wk | 3wk | |
approved
dco-signoff: yes
size/M
|
commented member-last new-commits
|
Unkinded Issues (65)
Resolution: Add a kind/ or triage/support label
Average age: 148.6d, Avg wait: 52.0d
Unprioritized Recent Issues (143)
Resolution: Add a priority/ or triage/ label
Average age: 104.5d, Avg wait: 52.6d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 4248 | |
Run cert-manager e2e tests with the race flag
|
2d | 2d |
area/testing
kind/cleanup
|
pr-merged
|
|||||
| 4246 |  |
ACME DNS Challenge and Propagation Delay (NXDOMAIN) | 3d | 3d | 3d |
kind/bug
|
recv
|
||||
| 4245 |  |
Ingress Shim Certificate Incorrectly Renewed Due To Usages Change | 3d | 3d |
kind/bug
|
||||||
| 4235 |  |
Reconsider error condition on empty secretnames in TLS hosts. | 5d | 5d | 5d |
kind/feature
|
recv
|
||||
| 139 previously listed items omitted | |||||||||||
New, has multiple reactions, but not important-soon: No matching items
New, has multiple commenters, but not important-soon: No matching items
needs information, has update (5)
Resolution: Comment and remove triage/needs-information tag
Average age: 224.0d, Avg wait: 198.5d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 3748 |  |
Cert-manager causes API server panic on clusters with more than 20000 secrets.
|
2
|
4mo | 7wk | 4mo |    |
kind/bug
triage/needs-information
|
commented pr-merged recv recv-q
|
|
| 3615 | |
resourceVersion should not be set on objects to be created |
8
|
5mo | 7wk | 5mo | |
kind/bug
triage/needs-information
|
recv recv-q
|
|
| 3611 |  |
Order expires on renew |
|
5mo | 5mo | 5mo | |
kind/bug
triage/needs-information
|
commented recv
|
|
| 3534 |  |
cert-manager tries to follow CNAME while "cnameStrategy" is set to "None" | 7mo | 5mo | 5mo | |
kind/bug
triage/needs-information
|
commented recv
|
||
| 2996 |  |
cainjector pod restart many times of V0.15.1 |
2
|
1y | 11mo | 1y |  |
area/cainjector
triage/needs-information
|
commented recv recv-q
|
Recently updated issue has a question (2)
Resolution: Add an answer
Average age: 60.2d, Avg wait: 2.0d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 4097 |  |
Generating SSL + ingress-nginx issue | 6wk | 5d | 6wk |   |
kind/bug
|
recv recv-q
|
||
| 3990 |  |
crt.sh is showing certs issued while k8s cluster is showing status as false | 2mo | 3d | 6wk |   |
area/acme
kind/bug
priority/important-soon
|
commented recv-q send
|