Flavio Castelli

Move generation of CA to the main reconciliation loop

3

## Is your feature request related to a problem? Currently the kubewarden-controller generates certificates for each Policy Server instance declared by the user. All these certificates are signed by a...

We're currently using [`controller-runtime`](https://github.com/kubernetes-sigs/controller-runtime) version 0.14.6. When creating the Manager we give to it some configuration Options, see [here](https://github.com/kubewarden/kubewarden-controller/blob/fc6e1e815f87a80cedb737ca625604f5e80557d6/main.go#L135) One of the values of the Manager Options is called [`SyncPeriod`](https://pkg.go.dev/sigs.k8s.io/[email protected]/pkg/manager#Options)....

Feature Request: make cert-manager optional

4

### Is your feature request related to a problem? Currently Kubewarden installation required cert-manager to be installed. cert-manager is used to create the internal certifcate used to secure the communication...

There are situations when the whole Kubewarden stack must be disabled. This could be because there's an emergency in place and some quick (and maybe non-compliant/insecure) actions have to be...

Improve the security posture of Kubewarden by implementing the improvements suggested by TAG Security whitepaper about admission controllers These are the pending items to be implemented: * [ ] https://github.com/kubewarden/kubewarden-controller/issues/227...

Feature Request: do not apply certain policies to selected users/groups/service accounts

4

### Is your feature request related to a problem? This is a feature request, based on a conversation happened on slack. > Hi! that's an interesting question. The user name,...

### Is there an existing issue for this? - [X] I have searched the existing issues ### Current Behavior Each policy has a `mode` attribute that has to possible values:...

### Is your feature request related to a problem? Currently the Cron Job that handles the audit-scanner is generated by the `kubewarden-controller` helm chart. The Cron Job requires a Secret...

### Is your feature request related to a problem? `AdmissionPolicy` can only listen for events happening inside of a specific Namespace, the one where they are deployed. It does not...