Travis Glenn Hansen

I considered the adding a bunch of streams route, that may be easy enough. I also considered using the api, glad to hear it's an option. Hypothetically I could put...

I'm not a `go` person. Does the approach above preserve the headers in their original state? I'm trying to use `traefik` which apparently leverages this under the hood and it's...

I have the beginnings of a project in place to monitor all certs in a cluster (not just those issued by cert-manager) and store the response in the respective secret....

@paweljoz do you have reasons why an operator external/independent of cert-manager doesn't fulfill the goals you outlined?

Must staple is orthogonal to whatever manages the ocsp responses in my opinion but indeed should be supported by cert-manager. @lukpep yes I’ve created the project/org but lack a few...

OK, initial stab is here: https://github.com/ocsp-manager/ocsp-manager

Yeah, go ahead and give it a try and open an issue in the project if you need some help doing initial configuration and providing initial feedback.

Did anyone happen to try out the manager and have any feedback to share?

It is an out of band solution yes. There are ways around the timeframe you’re referencing but under normal operation the ocsp data will be there very quickly…like within 1s...

I intend to extend the project to have a mutating webhook to ensure the response is there immediately upon create/update. Once that’s done we can write some doc and get...