Richard Wall

Warn users not to use insecure TSIG algorithms when using DNS UPDATE and ACME DNS01

2

* SHA1 and MD5 are allowed by our API but they are insecure. * We could return a [deprecation warning](https://github.com/cert-manager/cert-manager/pull/3936) if those are used. https://github.com/cert-manager/cert-manager/blob/833311d278af13e222e55f2507297f37d4e902b2/internal/apis/certmanager/validation/issuer.go#L386-L392 ## Links * https://cert-manager.io/docs/configuration/acme/dns01/rfc2136/ *...

These tests seem to fail intermittently. I haven't investigated why. * https://prow.build-infra.jetstack.net/job-history/gs/jetstack-logs/pr-logs/directory/pull-cert-manager-approver-policy-verify * https://prow.build-infra.jetstack.net/pr-history/?org=cert-manager&repo=approver-policy&pr=57 ``` approver-policy-controllers: RBAC if a RoleBinding is created which binds the user, the request should be...

Explain how to install cert-manager using ArgoCD

2

**Preview**: https://deploy-preview-1447--cert-manager-website.netlify.app/docs/installation/continuous-deployment-and-gitops/#using-argocd Continuing the work @shahkv95 started in https://github.com/cert-manager/website/pull/1350 * https://github.com/cert-manager/website/pull/1350 Some months later, in https://github.com/cert-manager/website/pull/1350#discussion_r1524077291 @Tokynet wrote: > @wallrj this is not my code/fix BUT i'm currently affected by...

The `issuer.vault.spec.caBundleSecretRef` docs from #1072 have gone missing I searched cert-manager.io for caBundleSecretRef and found only the release note: * https://cert-manager.io/docs/releases/release-notes/release-notes-1.10/#feature-1 _Originally posted by @wallrj in https://github.com/cert-manager/website/issues/1072#issuecomment-1941996880_

WIP: Patch release checklist

2

**Preview**: https://deploy-preview-1364--cert-manager-website.netlify.app/docs/contributing/release-process/#patch-releases I used this checklist for the v1.12.7 release and I found it useful. * https://github.com/cert-manager/cert-manager/issues/6546

Move Issuer / ClusterIssuer and Certificate resource content to a sub-folder of configuration/

4

**Preview**: https://deploy-preview-1075--cert-manager-website.netlify.app/ Part of the https://github.com/cert-manager/website/pull/1048 where we presented an improved overall navigation structure for the site. * Moved configuration/* > configuration/issuer-and-clusterissuer-resources/* * Moved usage/certificate > configuration/certificate-resources * Updated all...

Document how to install cert-manager using gitops and known issues with particular gitops implementations

7

We could add some documentation briefly explaining how to install cert-manager using gitops systems like Flux or Anthos. There are some known issues around the installation of CRDs and the...

Document when the vault pki role required setting `require_cn=false`

1

I fixed this by setting `require_cn=false` in my vault pki role [also i recently updated to vault v1.10.0]: ``` shell vault write pki_int/roles/dc \ allowed_domains=dc \ allow_subdomains=true \ require_cn=false \...

Move the meetings and slack information to a separate page

3

We've been reviewing the contributing guide and agreed that having the meetings and slack information as the main content of the contributing guide is distracting. New contributors first concern is...

The old Hugo site used to automatically add a list of links to sibling pages at the bottom of an index page and this made it (somewhat) clear to the...