Josh van Leeuwen

Hi @amit-handda, apologies for the delay. This is still on my backlog to get to :)

Not too sure what would be going wrong here. Are the any logs in kube-oidc-proxy you can post?

Hello! The reason for this is when using Kubernetes platforms (GKE, EKS...) where there is no access to the API server CLI flags and so can't be configured. This means...

Hi @hochuenw-dd, yes that would be a good addition. Is there anything in particular you would like to see, bar the usual suspects on the client and server of the...

/assign

One more thing.. I don't think it makes sense to require the protocol in the URI when the block is already HTTPS ```yaml - https: url: https://foo.bar/baz ```

Hi @cortopy, there is no technical reason why adding `Secret` as a target could not be done, however is poses security implications (trust would be able read + write all...

Hi @brandshaide, although that seems sane, I won't be able to give you any guarantees that this will work. Please try this on demo clusters first and be confident it...

Hi both :wave: All of these attributes are defined under subject as you posted. These will be requested in the X.509 subject as you would expect. The full the list...

Thanks @Tolsto, we need some documentation for this feature on the [website](https://github.com/cert-manager/website)- I can take care of that. Thank you again for your patience and review loops :slightly_smiling_face: /lgtm /approve...