Tim Ramlot

@lucacome can you fix the tests? EDIT: see https://github.com/cert-manager/cert-manager/pull/5451

/approve /lgtm

xref: https://kubernetes.slack.com/archives/CDEQJ0Q8M/p1631173111075800

@sclevine where is the 8 record cap enforced? what happens when more than 8 records are requested?

/remove-lifecycle stale

Thank you for your contribution, I like the idea of using workload identities. However, your current implementation uses the workload identity of the cert-manager pod, which means that it is...

@karlschriek sorry for the confusion, @MattiasAng corrected my comment; we currently already have the `--issuer-ambient-credentials` and `--cluster-issuer-ambient-credentials` flags that make sure we have no unwanted lateral privilege escalation between Issuers....

/ok-to-test

/remove-lifecycle rotten

/remove-lifecycle rotten /reopen