queue to be emptied once a week in a team triage meeting
Important soon, but no updates in 60 days (4)
Resolution: Downgrade to important-longterm
Average age: 816.5d, Avg wait: 0.0d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 5074 |  |
Race condition between issuers, certificates, and secrets
|
|
1y | 8mo | 1y |   |
lifecycle/frozen
kind/bug
priority/important-soon
|
commented member-last pr-closed send
|
|
| 1174 |  |
Document the docker images and how to find them |
|
8mo | 7mo | 7mo |  |
good first issue
priority/important-soon
kind/documentation
|
commented member-last send
|
|
| 195 |  |
Document keystores | 3y | 7mo | 3y |  |
priority/important-soon
kind/documentation
|
commented contributor-last send
|
||
| 174 |  |
Add documentation for CRD conversion webhook ca injection | 3y | 3y | 3y | |
help wanted
priority/important-soon
kind/documentation
|
commented member-last send
|
Important longterm, but no updates in 120 days (6)
Resolution: Downgrade to backlog
Average age: 1015.5d, Avg wait: 37.5d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 3521 |  |
Integration with ExternalDNS |
4
31
|
2y | 7mo | 1y |       |
help wanted
lifecycle/frozen
kind/feature
priority/important-longterm
|
commented recv-q send
|
|
| 850 | |
Document available cert-manager Prometheus metrics |
|
2y | 7mo | 2y |  |
documentation
good first issue
priority/important-longterm
|
recv recv-q similar
|
|
| 551 |  |
Documentation on how to handle large-scale certificate management & best practices |
2
|
2y | 7mo | 7mo | |
help wanted
priority/important-longterm
kind/documentation
|
commented member-last send
|
|
| 401 | |
Bring tutorials up to date | 2y | 7mo | 7mo | |
priority/important-longterm
|
commented member-last send
|
||
| 223 | |
Document wildcard certificate tutorial | 3y | 3y | 3y |   |
priority/important-longterm
kind/documentation
|
commented contributor-last send
|
||
| 56 |  |
Route53: document use of "region" field | 3y | 7mo | 7mo |  |
documentation
priority/important-longterm
|
commented contributor-last send
|
many reactions, low priority (16)
Resolution: Upgrade to priority-soon, priority-longterm, or longterm-support
Average age: 259.5d, Avg wait: 72.7d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 6179 |  |
CRDs shouldn't be templated in Helm... |
12
|
3mo | 3wk | 7wk |      |
commented send
|
||
| 6150 |  |
(Cluster)Issuer with vault auth and serviceAccountRef is not accepted by cluster due to audience
|
2
7
|
3mo | 1d | 2d |      |
commented open-milestone pr-unreviewed recv recv-q similar
|
||
| 6065 |  |
acme-http01-edit-in-place is ignored when edit ingress resource - has to be re-added |
5
|
4mo | 11d | 4mo |       |
kind/bug
|
recv recv-q
|
|
| 5516 |  |
Forbidden: seccomp may not be set pod.metadata.annotations |
3
13
|
11mo | 12h | 11mo |   |
kind/bug
lifecycle/stale
|
collaborator-last recv
|
|
| 5515 |  |
stuck on propagation check failed DNS record not yet propagated |
12
|
11mo | 3wk | 11mo |      |
kind/bug
lifecycle/rotten
|
recv similar
|
|
| 5514 | |
Venafi Issuer Read `caBundle` from Configmap or Secret | 
|
4
8
|
11mo | 3wk | 2mo |    |
good first issue
kind/feature
|
assigned assignee-updated commented pr-new-commits similar
|
| 2538 |  |
cert-manager does not use ingress.class from Ingress annotated with cert-manager.io/cluster-issuer |
61
|
3y | 2mo | 2y |               |
area/api
kind/feature
priority/backlog
|
commented recv recv-q similar
|
|
| 5867 |  |
Controller can't handle hitting request rate limits of zerossl ACME API
|
2
10
19
|
6mo | 2mo | 5mo |            |
kind/bug
|
commented pr-closed pr-merged recv-q send similar
|
|
| 583 | |
cert-manager with ZeroSSL | 44
|
2y | 1y | 1y |            |
commented send similar
|
||
| 1279 | |
docs: Certificate Defaults Tutorial |
7
|
3wk | 1d | 1d |   |
dco-signoff: yes
size/XL
needs-rebase
|
commented member-last reviewed-with-comment
|
|
| 256 | |
CEL expressions approver design |
6
|
2mo | 4d | 5d | |
dco-signoff: yes
approved
needs-ok-to-test
size/XL
do-not-merge/hold
|
commented contributor-last new-commits recv
|
|
| 144 |  |
Add CertificateRequest as a source
|
7
|
3mo | 1mo | 1mo |  |
commented contributor-last pr-merged recv similar
|
||
| 155 |  |
de-duplicate CA from the trust bundle | 
|
|
1mo | 2d | 2d | |
kind/feature
good first issue
|
assigned assignee-updated commented member-last pr-reviewed-with-comment send
|
| 184 | |
Add certificates deduplication feature |
5
|
4d | 1d | 2d | |
dco-signoff: yes
size/L
ok-to-test
|
commented recv recv-q reviewed-with-comment
|
|
| 28 |  |
add support for ecdsa keys |
4
|
3mo | 9d | 12d | |
dco-signoff: yes
size/XXL
|
commented contributor-last new-commits recv
|
|
| 51 | |
add pending request cache to allow for resuming in-flight requests that take longer than a single issuance cycle |
6
|
3wk | 14d | 3wk |   |
dco-signoff: yes
size/L
|
changes-requested commented contributor-last recv-q
|
many commenters, low priority (7)
Resolution: Upgrade to priority-soon, priority-longterm, or longterm-support
Average age: 79.8d, Avg wait: 2.0d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 6269 | |
Allow hardcoded JKS passwords |
|
6wk | 2d | 2d |  |
kind/feature
|
commented
|
|
| 6150 | |
(Cluster)Issuer with vault auth and serviceAccountRef is not accepted by cluster due to audience
|
2
7
|
3mo | 1d | 2d | |
commented open-milestone pr-unreviewed recv recv-q similar
|
||
| 6286 |  |
Remove dependencies on hashicorp libraries after the recent license change |
3
|
5wk | 4wk | 4wk |  |
triage/support
|
commented member-last send
|
|
| 5867 | |
Controller can't handle hitting request rate limits of zerossl ACME API
|
2
10
19
|
6mo | 2mo | 5mo | |
kind/bug
|
commented pr-closed pr-merged recv-q send similar
|
|
| 6228 | |
Issue 5514 read cabundle from kube objects - design doc |
|
3
|
2mo | 2d | 7d |  |
size/L
release-note-none
kind/design
needs-ok-to-test
dco-signoff: no
|
assigned assignee-updated commented new-commits open-milestone recv recv-q
|
| 157 | |
Add support for generating certificates with helm | 7wk | 3d | 6wk | |
dco-signoff: yes
approved
size/M
|
commented contributor-last unreviewed
|
||
| 156 |  |
Allow enabling hostNetwork mode in Helm chart | 7wk | 5d | 7wk |   |
dco-signoff: yes
size/XS
lgtm
ok-to-test
|
approved recv recv-q
|
Screaming into the void (1)
Resolution: Reopen, or ask folks to open a new issue
Average age: 549.5d, Avg wait: 538.2d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 4991 |  |
Successful challenge request, but no certificate |
5
|
2y | 16h | 2y |     |
kind/bug
|
closed commented recv recv-q
|
Needs information for over 2 weeks (3)
Resolution: Close or remove triage/needs-information label
Average age: 596.1d, Avg wait: 0.0d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 6294 |  |
Helm chart deployment is failing on update to k8s 1.25 | 4wk | 4wk | 4wk | |
triage/needs-information
|
commented member-last send
|
||
| 3748 |  |
Cert-manager causes API server panic on clusters with more than 20000 secrets.
|
13
|
2y | 7wk | 2y |      |
kind/bug
triage/needs-information
|
commented pr-merged send
|
|
| 15 | |
Allow data-root to be an absolute path | 2y | 7mo | |
kind/bug
triage/needs-information
|
contributor-last
|
Support request over 30 days old: No matching items
Issues nearing expiration (23)
Resolution: Close or label as frozen
Average age: 284.9d, Avg wait: 62.1d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 6113 |  |
Integrate with Istio multi-cluster certificate management | 4mo | 1d | 4mo |
kind/feature
lifecycle/rotten
|
collaborator-last recv
|
|||
| 6111 |  |
ACME Route53 dns01 resolver doesn't find private hosted zones when `hostedZoneID` is omitted |
|
4mo | 15h | 4mo |  |
lifecycle/rotten
|
collaborator-last recv
|
|
| 6096 |  |
Sporadic failures at the order lever with CAA errors | 4mo | 6d | 4mo |  |
kind/bug
lifecycle/rotten
|
collaborator-last recv
|
||
| 6021 | |
Make it possible to specify logging options for the ACME solver | 4mo | 3wk |
kind/feature
lifecycle/rotten
|
collaborator-last
|
||||
| 6010 |  |
Support the ACME Renewal Information (ARI) extension | 4mo | 3wk | 4mo | |
kind/feature
lifecycle/rotten
|
collaborator-last commented recv
|
||
| 6007 |  |
support HA acme service with freeipa |
|
4mo | 4wk | 4mo |
kind/feature
lifecycle/rotten
|
collaborator-last recv
|
||
| 6005 |  |
Venafi custom field ca-dn ignored | 4mo | 4wk | 4mo |
kind/bug
lifecycle/rotten
|
collaborator-last recv
|
|||
| 6004 | |
Support TLS-ALPN-01 challenges |
2
|
4mo | 4wk | 4mo |
kind/feature
lifecycle/rotten
|
collaborator-last recv
|
||
| 5987 |  |
Orders sent by cert-manager using a cluster-issuer with an EAB are not RFC8555 compliant | Step-CA private ACME Server |
14
|
5mo | 3wk | 5mo |     |
kind/bug
lifecycle/rotten
|
collaborator-last recv
|
|
| 5974 |  |
Issue with version upgrade causing multiple containers in deployment |
6
|
5mo | 2wk | 5mo |    |
kind/bug
lifecycle/rotten
|
collaborator-last recv
|
|
| 5862 |  |
http01.ingress.class doesn't work |
4
|
6mo | 2wk | 5mo |     |
kind/bug
lifecycle/rotten
|
collaborator-last commented recv-q send
|
|
| 5846 |  |
Failed to create certificate for my domain | 6mo | 3wk | 6mo |  |
triage/support
lifecycle/rotten
|
collaborator-last commented recv-q send
|
||
| 5774 | |
Add descriptions for container image repos | 7mo | 3wk | 4mo | |
good first issue
kind/documentation
lifecycle/rotten
|
collaborator-last commented
|
||
| 5643 |  |
AdditionalOutputFormat is still in alpha |
|
9mo | 7d | 6mo |  |
kind/feature
lifecycle/rotten
|
collaborator-last commented send
|
|
| 5515 | |
stuck on propagation check failed DNS record not yet propagated |
12
|
11mo | 3wk | 11mo | |
kind/bug
lifecycle/rotten
|
recv similar
|
|
| 5171 | |
TPP Allowed Domains can cause valid certificate to error |
|
1y | 14d | 8mo |  |
kind/bug
lifecycle/rotten
area/venafi
|
collaborator-last commented
|
|
| 2380 |  |
Helm chart version is not SemVer-compatible |
7
|
3y | 1d | 1d |         |
kind/bug
lifecycle/rotten
|
commented contributor-last send
|
|
| 6001 | |
Improve verify-chart scripts & add helmchk | 5mo | 3d | 5mo | |
release-note-none
needs-rebase
approved
kind/cleanup
size/M
lifecycle/rotten
dco-signoff: yes
|
collaborator-last commented new-commits
|
||
| 5446 |  |
Allow concurrent same-FQDN DNS-01 challenges when using route53 | 1y | 3d | 5mo | |
release-note
size/M
area/acme
lifecycle/rotten
dco-signoff: yes
area/testing
ok-to-test
needs-kind
|
collaborator-last commented open-milestone reviewed-with-comment send similar
|
||
| 5356 |  |
Allow ECDSA for ACME client keys |
2
4
|
1y | 3d | 4mo |  |
size/L
release-note
needs-rebase
area/api
kind/feature
area/acme
lifecycle/rotten
dco-signoff: yes
area/testing
ok-to-test
area/deploy
|
collaborator-last commented reviewed-with-comment send
|
|
| 5373 |  |
Allow config of http01 solver pod security context |
2
|
1y | 3d | 5mo |    |
size/L
release-note
needs-rebase
area/api
kind/feature
area/acme
lifecycle/rotten
dco-signoff: yes
ok-to-test
area/acme/http01
area/deploy
|
collaborator-last commented recv-q send unreviewed
|
|
| 6003 | |
move pkg/issuer/acme/http/solver to cmd/acmesolver/solver | 5mo | 6d |
release-note-none
approved
size/S
kind/cleanup
area/acme
lifecycle/rotten
dco-signoff: yes
area/acme/http01
|
collaborator-last unreviewed
|
||||
| 5324 | |
Create 20220720-per-certificate-owner-ref.md |
6
|
1y | 3wk | 3wk |  |
size/L
release-note-none
approved
kind/design
lifecycle/rotten
dco-signoff: yes
|
commented member-last reviewed-with-comment similar
|
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags |
| 6003 | |
move pkg/issuer/acme/http/solver to cmd/acmesolver/solver | 5mo | 6d |
release-note-none
approved
size/S
kind/cleanup
area/acme
lifecycle/rotten
dco-signoff: yes
area/acme/http01
|
collaborator-last unreviewed
|
||||
| 6103 | |
Unify semver version logic | 4mo | 4wk |
size/L
release-note-none
approved
kind/cleanup
dco-signoff: yes
|
collaborator-last open-milestone unreviewed
|
||||
| 6120 | |
add comments explaining the Sync function & small test bugfix |
| 3mo | 5wk | 2mo | |
release-note-none
approved
lgtm
size/S
kind/cleanup
dco-signoff: yes
|
assigned assignee-updated commented member-last open-milestone reviewed-with-comment
|
|
| 5324 | |
Create 20220720-per-certificate-owner-ref.md |
6
|
1y | 3wk | 3wk | |
size/L
release-note-none
approved
kind/design
lifecycle/rotten
dco-signoff: yes
|
commented member-last reviewed-with-comment similar
|
|
| 6277 | |
ControllerConfiguration fuzzer, only set the value in case the random value is empty | 6wk | 5wk |
size/L
release-note-none
approved
area/api
kind/cleanup
dco-signoff: yes
area/testing
|
collaborator-last unreviewed
|
||||
| 6053 | |
Make KeyUsage and BasicConstraints Critical extensions | 4mo | 6wk |
release-note
approved
kind/bug
size/M
dco-signoff: yes
|
collaborator-last open-milestone unreviewed
|
||||
| 1071 | |
Improved the summary on the docs homepage |
2
|
1y | 4mo | 4mo |  |
approved
dco-signoff: yes
size/S
|
commented contributor-last reviewed-with-comment send
|
|
| 1199 | |
Webhook troubleshooting: advise people to set `timeoutSeconds` to 30 seconds | 6mo | 6mo | |
approved
dco-signoff: yes
size/M
|
unreviewed
|
|||
| 1197 | |
doc about new option default-cleanup-policy |
|
6mo | 5mo | 5mo | |
approved
dco-signoff: yes
size/M
|
commented member-last new-commits send
|
|
| 204 | |
Add "inner workings" section to README.md | 4mo | 4mo | 4mo | |
dco-signoff: yes
approved
size/XS
|
commented member-last unreviewed
|
||
| 116 |  |
feat: add support for additional pod annotations/labels |
| 7mo | 10d | 5wk | |
dco-signoff: yes
approved
ok-to-test
size/S
|
assigned assignee-updated commented contributor-last recv similar unreviewed
|
|
| 98 | |
Cert formats proposal | 8mo | 8mo |
dco-signoff: yes
approved
size/L
|
contributor-last unreviewed
|
||||
| 24 | |
Document release process and update the versions of the GitHub Actions workflows | 6mo | 4mo |
dco-signoff: yes
size/M
approved
|
contributor-last unreviewed
|
Pull Requests: Stale (83)
Resolution: Add comment and/or close PR
Average age: 236.4d, Avg wait: 39.5d
| ID | Au | Desc | As | Rea | Cr | Up | Re | Cmntrs | Labels | Tags | |
| 6248 |  |
feat: allow changing the default Deployment revisionHistoryLimit | 1mo | 5d | 1mo |
release-note
size/S
needs-ok-to-test
dco-signoff: yes
area/deploy
needs-kind
|
collaborator-last recv similar unreviewed
|
||||
| 6186 |  |
feat: Add OwnerReference to the secrets created by ACME ClusterIssuer and Issuer | 3mo | 6d | 2mo |  |
size/XS
release-note-none
needs-ok-to-test
area/acme
dco-signoff: yes
needs-kind
|
commented send unreviewed
|
|||
| 6028 | |
Fix runtime.Scheme errors in tests | 4mo | 6d |
size/L
release-note-none
kind/cleanup
lifecycle/stale
area/acme
dco-signoff: yes
area/testing
|
collaborator-last open-milestone unreviewed
|
|||||
| 6190 |  |
Adds ingress annotation support for alt-names | 3mo | 6d | 6d |  |
release-note
size/S
needs-ok-to-test
dco-signoff: yes
area/testing
needs-kind
|
commented member-last send similar unreviewed
|
|||
| 6314 | |
Upgrade go-licenses to the latest master version | 3wk | 15d | 3wk | |
release-note-none
needs-rebase
approved
kind/cleanup
size/M
area/acme
dco-signoff: yes
area/testing
|
collaborator-last commented unreviewed
|
|||
| 5420 |  |
Add SkipTLSVerify option to Vault issuer |
2
|
1y | 18d | 2mo |  |
release-note
size/S
area/api
needs-ok-to-test
dco-signoff: no
needs-kind
|
commented new-commits recv recv-q
|
||
| 5743 | |
Add MaxPathLen and add EncodeBasicConstraintsInRequest option to Certificate and CertificateRequest resources | 8mo | 3wk | 6wk | |
release-note
size/XL
needs-rebase
approved
area/api
kind/cleanup
dco-signoff: yes
area/testing
ok-to-test
area/deploy
|
collaborator-last commented new-commits open-milestone
|
|||
| 6315 | |
Upgrade go to 1.21 | 3wk | 3wk |
size/L
release-note-none
needs-rebase
kind/cleanup
area/acme
dco-signoff: yes
area/testing
|
collaborator-last unreviewed
|
|||||
| 5848 | |
WIP: Design: core-issuers | 6mo | 4wk | 3mo | |
release-note-none
approved
lgtm
do-not-merge/work-in-progress
do-not-merge/hold
kind/design
size/M
dco-signoff: yes
|
collaborator-last commented reviewed-with-comment send
|
|||
| 5383 | |
Generate applyconfigurations and Apply functions | 1y | 4wk | 7mo | |
release-note
needs-rebase
approved
area/api
do-not-merge/work-in-progress
priority/important-longterm
size/XXL
dco-signoff: yes
needs-kind
|
changes-requested collaborator-last commented draft
|
|||
| 5447 | |
Allow extra DNS-01 propagation time to be configured |
|
1y | 4wk | 1y |  |
release-note
needs-rebase
size/S
area/acme
dco-signoff: yes
ok-to-test
area/acme/dns01
needs-kind
|
collaborator-last commented open-milestone recv unreviewed
|
||
| 5567 | |
Certificates: preventing CertificateRequest creation runaway |
| 10mo | 4wk | 3mo |  |
release-note
needs-rebase
approved
area/api
kind/feature
size/XXL
dco-signoff: yes
area/testing
area/deploy
|
assigned assignee-updated collaborator-last commented open-milestone reviewed-with-comment
|
||
| 6002 | |
Move pkg/controller/cainjector to cmd/cainjector/controller | 5mo | 4wk | 4mo | |
release-note-none
needs-rebase
approved
size/S
kind/cleanup
dco-signoff: yes
|
collaborator-last commented unreviewed
|
|||
| 6102 | |
Move ctl utils to cmd/ctl | 4mo | 4wk |
size/L
release-note-none
needs-rebase
approved
kind/cleanup
dco-signoff: yes
area/testing
|
collaborator-last unreviewed
|
|||||
| 6145 | |
Improve Trigger, Readiness and PostIssuance Policy chains | 3mo | 4wk | 3mo | |
size/L
release-note-none
approved
do-not-merge/work-in-progress
kind/cleanup
dco-signoff: yes
area/testing
ok-to-test
|
collaborator-last commented draft unreviewed
|
|||
| 6155 | |
Add Certificate Hash | 3mo | 4wk |
size/L
release-note-none
needs-rebase
approved
area/api
do-not-merge/work-in-progress
kind/feature
dco-signoff: yes
|
collaborator-last draft unreviewed
|
|||||
| 5860 |  |
Fix helm loglevel parsing | 6mo | 5wk | 4mo | |
size/XS
release-note-none
needs-ok-to-test
dco-signoff: yes
area/deploy
needs-kind
|
commented member-last open-milestone reviewed-with-comment send
|
|||
| 6266 |  |
fix(rbac): add patch verb on secrets to issuer clusterrole | 6wk | 6wk | 6wk | |
size/XS
release-note-none
do-not-merge/hold
dco-signoff: yes
ok-to-test
area/deploy
needs-kind
|
approved commented member-last send
|
|||
| 6124 |  |
Add design/20230601.gateway-route-hostnames. | 3mo | 6wk | 3mo | |
size/L
release-note-none
kind/design
needs-ok-to-test
dco-signoff: yes
|
collaborator-last new-commits recv recv-q
|
|||
| 6015 |  |
add imagePullSecrets clauses to deployments, jobs |
|
4mo | 7wk | 7wk | |
release-note
size/S
kind/feature
dco-signoff: yes
ok-to-test
area/deploy
|
collaborator-last commented send unreviewed
|
||
| 5701 |  |
feat: added custom endpoint override flag for http solver | 8mo | 1mo | 8mo |   |
release-note
needs-rebase
kind/feature
needs-ok-to-test
size/M
area/acme
dco-signoff: yes
area/acme/http01
|
collaborator-last recv recv-q unreviewed
|
|||
| 4330 |  |
Add client certificate auth method for Vault issuer |
4
|
2y | 6wk | 6mo |   |
release-note
needs-rebase
approved
area/api
kind/feature
size/XXL
area/acme
area/vault
dco-signoff: yes
area/testing
ok-to-test
area/deploy
|
collaborator-last commented open-milestone recv recv-q reviewed-with-comment similar
|
||
| 6146 | |
Add Venafi custom field support to cert-shim | 3mo | 2mo | 2mo | |
release-note-none
size/S
do-not-merge/hold
needs-ok-to-test
dco-signoff: yes
needs-kind
|
changes-requested commented member-last send
|
|||
| 6122 |  |
Improve acmedns so that it honors followCname Setting | 3mo | 2mo | 2mo | |
size/XS
release-note
area/acme
dco-signoff: yes
ok-to-test
area/acme/dns01
needs-kind
|
commented member-last send unreviewed
|
|||
| 6193 |  |
[feat] when helm set `installCRDs: true`. crds.yaml file must be pre-install and pre-upgrade | 3mo | 2mo | 2mo | |
release-note
size/S
kind/feature
needs-ok-to-test
dco-signoff: yes
area/deploy
|
commented member-last send unreviewed
|
|||
| 1289 | |
Add diagrams to explain all the "requesting certificates"/ "obtaining certificates" flows | 2wk | 6d | |
dco-signoff: yes
size/XL
|
unreviewed
|
||||
| 1291 | |
Reorganise the usage section & move missing topics to this section | 2wk | 6d | |
dco-signoff: yes
size/L
|
unreviewed
|
||||
| 1260 | |
WIP: Clearer top-level menu layout |
| 2mo | 3wk | 2mo | |
approved
dco-signoff: yes
size/XL
needs-rebase
do-not-merge/work-in-progress
|
assigned assignee-updated commented contributor-last reviewed-with-comment send
|
||
| 1276 | |
Release-process: sed command not compatible with BSD sed and other improvements |
|
3wk | 12d | 12d | |
approved
dco-signoff: yes
lgtm
do-not-merge/hold
size/L
|
approved commented contributor-last
|
||
| 1253 |  |
Remove Bitnami kubeprod as installation method | 3mo | 3wk | 3wk | |
dco-signoff: yes
size/S
|
commented member-last reviewed-with-comment send
|
|||
| 1283 | |
Run "npm update" | 3wk | 3wk | 3wk | |
approved
dco-signoff: yes
size/XXL
do-not-merge/work-in-progress
|
commented draft unreviewed
|
|||
| 790 |  |
Update route53.md | 2y | 3wk | 3wk | |
dco-signoff: no
size/XS
needs-rebase
needs-ok-to-test
|
changes-requested commented member-last send
|
|||
| 1259 |  |
Fixed Azure Workload identity doc | 2mo | 2mo | 2mo | |
dco-signoff: yes
size/S
|
recv unreviewed
|
|||
| 1249 |  |
Correct `kubectl operator install` for latest version of operator-sdk | 3mo | 3mo | 3mo | |
size/XS
dco-signoff: yes
|
changes-requested commented member-last send
|
|||
| 1234 | |
Correct the cmctl release generation flow | 4mo | 3mo | 4mo | |
approved
dco-signoff: yes
needs-rebase
size/S
|
contributor-last recv unreviewed
|
|||
| 948 |  |
add note to ingress class definition |
| 1y | 4mo | 4mo | |
dco-signoff: no
size/XS
needs-rebase
needs-ok-to-test
|
assigned commented contributor-last send unreviewed
|
||
| 1075 | |
Move Issuer / ClusterIssuer and Certificate resource content to a sub-folder of configuration/ | 1y | 3mo |  |
approved
dco-signoff: yes
size/L
needs-rebase
|
changes-requested contributor-last
|
||||
| 1213 | |
Draft of tutorial for Google's Public CA | 5mo | 4mo | 4mo | |
dco-signoff: yes
size/L
ok-to-test
|
commented member-last reviewed-with-comment send
|
|||
| 1202 | |
Add section about client cert authentication for vault | 6mo | 5mo | 5mo | |
dco-signoff: yes
do-not-merge/work-in-progress
size/M
|
commented contributor-last draft new-commits send similar
|
|||
| 548 | |
Move the "Approval API" documentation to /concepts/certificaterequest |
|
|
2y | 7mo | 2y | |
approved
dco-signoff: yes
kind/cleanup
size/XL
needs-rebase
|
assigned assignee-updated changes-requested commented contributor-last send
|
|
| 859 | |
Move the meetings and slack information to a separate page |
|
2y | 1y | 1y | |
approved
dco-signoff: yes
needs-rebase
size/M
|
changes-requested commented member-last send
|
||
| 701 |  |
Issuer with IRSA needs ambient credentials flag |
|
2y | 1y | 2y |  |
dco-signoff: no
size/S
ok-to-test
|
commented contributor-last new-commits send
|
||
| 528 |  |
Update "Setting Nameservers for DNS01 Self Check" example | 2y | 2y | 2y |
size/XS
dco-signoff: yes
needs-rebase
needs-ok-to-test
|
contributor-last recv unreviewed
|
||||
| 17 | |
Add image validation for Docker architecture |
| 3y | 2y | 2y | |
dco-signoff: yes
lgtm
size/L
needs-rebase
|
assigned assignee-updated commented contributor-last new-commits send
|
||
| 43 | |
No more requirement "be in the release folder" to run cmrel, remove the flag --cloudbuild | 2y | 2y |
dco-signoff: yes
approved
size/M
needs-rebase
|
contributor-last unreviewed
|
|||||
| 36 | |
Add the "cmrel update-release-branch" command | 2y | 2y | 2y | |
dco-signoff: yes
approved
size/M
needs-rebase
do-not-merge/work-in-progress
|
commented contributor-last draft unreviewed
|
|||
| 128 |  |
Bump google.golang.org/grpc from 1.49.0 to 1.53.0 | 2mo | 2mo | 2mo | |
dco-signoff: yes
size/XL
dependencies
ok-to-test
|
commented member-last send unreviewed
|
|||
| 216 |  |
feat: add the ability to specify certificate usages | 2mo | 7d | 2mo | |
dco-signoff: yes
size/M
needs-ok-to-test
|
contributor-last recv unreviewed
|
|||
| 187 |  |
Add the ability to ignore cluster scoped resources. | 9mo | 4mo | 7mo | |
dco-signoff: yes
size/XS
ok-to-test
|
commented contributor-last recv recv-q reviewed-with-comment
|
|||
| 202 |  |
Support adding pod annotations | 6mo | 6mo | 6mo |
dco-signoff: yes
size/XS
needs-ok-to-test
|
contributor-last recv similar unreviewed
|
||||
| 229 |  |
feat: fix app label of metrics svc for ServiceMonitor discovery |
2
|
5mo | 4mo | 4mo | |
dco-signoff: yes
size/XS
ok-to-test
|
commented member-last reviewed-with-comment send
|
||
| 176 |  |
Allow configuring of the priorityClass | 2wk | 19d | 2wk | |
dco-signoff: yes
size/XS
ok-to-test
|
contributor-last recv unreviewed
|
|||
| 151 |  |
Respect seccomp toggle in init container | 2mo | 4wk | 4wk | |
size/XS
needs-ok-to-test
dco-signoff: no
|
commented member-last send unreviewed
|
|||
| 149 |  |
Add Configurable Common Labels and Add a PDB | 2mo | 5wk | 2mo | |
dco-signoff: yes
size/M
needs-ok-to-test
needs-rebase
|
contributor-last recv recv-q unreviewed
|
|||
| 147 |  |
Add ability to set pod level securityContext | 3mo | 3mo | 3mo |
dco-signoff: yes
size/XS
needs-ok-to-test
|
contributor-last recv unreviewed
|
||||
| 118 |  |
Make seccompProfile optional in initContainer | 5mo | 4mo | 4mo | |
dco-signoff: yes
size/XS
ok-to-test
needs-rebase
|
commented member-last send unreviewed
|
|||
| 129 |  |
Add attribute support for certificate subject |
|
9mo | 10d | 10d | |
dco-signoff: yes
size/L
ok-to-test
|
commented member-last reviewed-with-comment send
|
||
| 135 |  |
Added options to all containers |
| 8mo | 7mo | 7mo | |
dco-signoff: yes
size/L
needs-rebase
ok-to-test
|
assigned commented contributor-last send unreviewed
|
||
| 139 | |
Bump golang.org/x/text from 0.3.7 to 0.3.8 in /hack/tools |
|
7mo | 16d | 16d | |
dco-signoff: yes
size/S
ok-to-test
dependencies
|
commented member-last send unreviewed
|
||
| 25 |  |
Fix default renewal period |
|
5mo | 12d | 12d | |
dco-signoff: yes
size/XS
|
commented member-last reviewed-with-comment send
|
||
| 32 |  |
Allow installation in a custom namespace |
|
3mo | 12d | 12d | |
dco-signoff: yes
size/L
|
commented member-last send unreviewed
|
||
| 29 |  |
Additional support for subject annotations |
3
|
3mo | 12d | 12d | |
dco-signoff: yes
size/XXL
|
commented member-last reviewed-with-comment send similar
|
||
| 46 | |
Add timeout to renewal issuance logic |
|
7mo | 3wk | 3wk | |
dco-signoff: yes
size/M
ok-to-test
|
commented contributor-last new-commits recv
|
||
| 48 | |
Retry pending request when issue is called |
| 7mo | 3wk | 3wk | |
dco-signoff: yes
size/L
ok-to-test
|
assigned assignee-updated commented member-last new-commits send
|
||
| 34 | |
WIP: E2E testing boilerplate |
|
1y | 7mo | 1y | |
size/XXL
dco-signoff: yes
do-not-merge/hold
approved
do-not-merge/work-in-progress
needs-rebase
|
commented contributor-last new-commits recv recv-q
|
||
| 28 |  |
Include Pod UID on CertificateRequest resources |
|
|
1y | 1y | 1y | |
dco-signoff: yes
do-not-merge/hold
approved
size/XS
ok-to-test
|
assigned contributor-last recv recv-q unreviewed
|
|
| 42 | |
Switch sample-external-issuer to issuer-lib | 6wk | 19d |
do-not-merge/work-in-progress
dco-signoff: yes
size/XXL
|
contributor-last draft unreviewed
|
|||||
| 16 previously listed items omitted: #6003 #5324 #6103 #6120 #6277 #6053 #1071 #1199 #1197 #204 #156 #116 #98 #28 #24 #51 | |||||||||||
