[gardener-extension-shoot-cert-service]

Improvements

[USER] An issue has been fixed which caused certificates to not get ready if the TLS certificate was successfully issued before. (#25, @timuthy)
[USER] validation: remove lastPendingTimestamp as required field in status (#22, @MartinWeindel)
[OPERATOR] Required network policies for Cert-Management have been aligned with the latest changes from Gardener (gardener/gardener#2339). (#27, @timuthy)
[OPERATOR] Adds issuer secrets as resources to extension status so they could be properly migrated (#24, @stoyanr)
[OPERATOR] An issue preventing CRDs to be created on v1.11.x cluster is now fixed. (#20, @ialidzhikov)
[OPERATOR] It is now possible to control whether the default issuer is restricted to the shoot domain (restrictIssuer=true default) or whether it can be used w/o a domain restriction (restrictIssuer=false). (#19, @timuthy)

[USER] allow to set certificate secret reference without setting 'secretName' field (gardener/cert-management#30, @MartinWeindel)
[USER] validate for duplicate domain names in certificate (gardener/cert-management#30, @MartinWeindel)
[OPERATOR] Fix propagation of DNS entry on Alicloud DNS by setting default TTL to 60s (gardener/cert-management#33, @MartinWeindel)
[OPERATOR] New command line option --propagation-timeout (gardener/cert-management#33, @MartinWeindel)
[OPERATOR] allow to specify a quota for certificate requests per day (gardener/cert-management#30, @MartinWeindel)
[OPERATOR] lease mechanism is activated for all controllers to allow running multiple instances (gardener/cert-management#30, @MartinWeindel)
[OPERATOR] The commonName field of certificates is now subjected to a 64 characters limit. (gardener/cert-management#28, @timuthy)
[OPERATOR] Validation for CRDs are added. (gardener/cert-management#26, @zanetworker)

[OPERATOR] Fixed a bug in the health check library that leads to too many health checks being executed when the Extension.Status changes. (gardener/gardener#2307, @danielfoehrKn)
[OPERATOR] Fixed the health check condition.lastTransitionTime in the health check library. (gardener/gardener#2307, @danielfoehrKn)