cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
v1.7.3 is in effect a bug fix release which increases some hard-coded timeouts which were preventing the use of certain ACME issuers
which sometimes had slower response times. This is known to include ZeroSSL and Sectigo.
These issues were reported by many users. We'd like to thank the following for their help and feedback on this topic:
- @JoooostB
- @fatz
- @jgreat
- @sashokbg
- @mycloudedu
- @hadogenes
- @SudonymTM
- @amalucelli
- @MilheiroSantos
- @dverbeek84
- @kxs-jnadeau
- @fablarosa
- @nik-nazarov
- @omBratteng
- @shubham-root
- @alphabet5
- @hawksight
Thanks also to the cert-manager maintainers who were involved in reviewing this fix and helping to move things forwards:
Changes since v1.7.2
Bug
- Increase timeouts for issuer and clusterissuer controllers to 2 minutes and increase ACME client HTTP timeouts to 90 seconds, in order to enable the use of slower ACME issuers which take a long time to process certain requests. (#5232, @JoooostB @SgtCoDFish)
Other (Cleanup)
- Bumps go to 1.17.11 and base images to latest distroless base images (#5234, @SgtCoDFish)