Comments (5)
whereisaaron
commented on May 12, 2024
The 'CA' flag applies to both root and intermediate certificates. So I think 'isCA' and 'isSelfSigned' are two different things?
from cert-manager.
munnerz
commented on May 12, 2024
@whereisaaron sorry, the original issue wasn't clear.
#84 is tracking adding self signed certificates support. This is specifically just for adding the isCA field, which is required in order for us to later support #83. My thoughts here are that a user can create a Certificate resource with isCA set to true, and the issuer set to selfsigned.
from cert-manager.
retest-bot
commented on May 12, 2024
Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close.
Send feedback to jetstack.
/lifecycle stale
from cert-manager.
zwtj
commented on May 12, 2024
Hi, just wanna ask if this issue is still considered to be implemented?
from cert-manager.
munnerz
commented on May 12, 2024
Yep, this will be in the v0.5 release 😄
from cert-manager.
Related Issues (20)
- Can the duration of the server cert that is generated for the webhook be set? HOT 3
- Cert-manager currently faces difficulties renewing certificates within the EKS. HOT 1
- Webhook validation bugs for cert subjects HOT 3
- Overly strict subject requirements HOT 3
- reinstall failed after k8s upgrade HOT 2
- DNS-01 challenge propagation | NS ns-512.awsdns-00.net.:53 returned REFUSED for _acme-challenge .... HOT 5
- Checklist for next backport release HOT 1
- Can't verify image signature HOT 8
- Creating multiple Certificates with duplicate dnsNames (Issuing certificate as Secret does not exist)
- Add an `approveSignerNames` install option
- Internal error occurred: failed calling webhook "webhook.cert-manager.io": failed to call webhook code 503: 503 Service Unavailable
- Allow algorithm selection for keystore "passwords" HOT 2
- Issuer for Gateway uses the hostname only rather than the httproutes HOT 6
- Allow chart to have full customization over http01.ingress
- [question] about images in gcr.io/distroless
- Support for "UID" RDN in X509 Subject HOT 2
- Unable to create certificates for domains mentioned in Selector DNS zones
- cert-manager kubectl plugin does not support the `--context` flag HOT 4
- challenge stuck in pending state - certifcate never gets ready HOT 7
- keyUsage extension may be empty
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cert-manager.