Skip to content
This repository has been archived by the owner on Feb 22, 2022. It is now read-only.

[stable/cert-manager] Upgrade cert-manager to 0.8.0 #16275

Closed
timbrandin opened this issue Aug 13, 2019 · 5 comments
Closed

[stable/cert-manager] Upgrade cert-manager to 0.8.0 #16275

timbrandin opened this issue Aug 13, 2019 · 5 comments
Labels
lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale.

Comments

@timbrandin
Copy link

Background

As per this email from Letsencrypt, we must upgrade cert-manager by November 1st, 2019

stable/cert-manager is currently on version 0.6.2 and Letsencrypt will start blocking traffic from versions below 0.8.0

https://github.com/helm/charts/blob/master/stable/cert-manager/values.yaml

from: | noreply@letsencrypt.org
to: | [REDACTED]
date: | 10 Aug 2019, 07:19
subject: | ACTION REQUIRED: Let's Encrypt is blocking old cert-manager versions

We've been working with Jetstack, the authors of cert-manager, on a
series of fixes to the client. Cert-manager sometimes falls into a
traffic pattern where it sends really excessive traffic to Let's
Encrypt's servers, continuously. To mitigate this, we plan to start
blocking all traffic from cert-manager versions less than 0.8.0 (the
current semver minor release), as of November 1, 2019. Please upgrade
all of your cert-manager instances before then.

We're sending this email because this is the contact address of your
cert-manager instance at:

[REDACTED] .

Version 0.8.0 is much better but we still observe excessive traffic in
some cases. We're working with Jetstack to improve these cases. As new
versions of cert-manager are released, we will add the non-current
versions to our block list after 3 months. We strongly encourage
cert-manager users to stay up-to-date with new versions.

Also, there is an opportunity to help both Jetstack and Let's Encrypt.
Once you've upgraded, please check the logs for your cert-manager
instances from time to time. Are they making excessive requests to Let's
Encrypt (more than, say, 10 per day over multiple days)? If so, please
share details at cert-manager/cert-manager#1948 .

Thanks,
Let's Encrypt Team

@stefanandres
Copy link
Contributor

Shouldn't it rather be completly removed in favor of the upstream helm repo/chart?

@okgolove
Copy link
Collaborator

okgolove commented Aug 13, 2019

As far as I know cert-manager helm chart is hosted there now.

@batazor
Copy link
Collaborator

batazor commented Aug 14, 2019

From stable/cert-manager:

This Helm chart is deprecated.
All future changes to the cert-manager Helm chart should be made in the
official repository.
The latest version of the chart can be found on the Helm Hub.

@stale
Copy link

stale bot commented Sep 13, 2019

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Any further update will cause the issue/pull request to no longer be considered stale. Thank you for your contributions.

@stale stale bot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Sep 13, 2019
@stale
Copy link

stale bot commented Sep 27, 2019

This issue is being automatically closed due to inactivity.

@stale stale bot closed this as completed Sep 27, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale.
Projects
None yet
Development

No branches or pull requests

4 participants