weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

add shrinking core to roadmap

Browse Source 
Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
This commit is contained in:
Ashley Davis 2022-07-20 12:52:42 +01:00
parent cae9778fed
commit 284b4716b1
No known key found for this signature in database
GPG Key ID: DD14CC017E32BEB1
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
ROADMAP.md
View File

@ -39,8 +39,9 @@ Enable best-practice PKI management with cert-manager.
- Handle CA cert being renewed: deal with the cases where the CA cert is renewed and allow for all signed certs to be renewed
- Make cert-manager a viable way to create and manage private PKI deployments at scale
- Trust root distribution:handle distributing all trust roots within a cluster, allowing for certs to be verified within a cluster
(See [cert-manager/trust](https://cert-manager.io/docs/projects/trust/))
- Trust root distribution: handle distributing all trust roots within a cluster, allowing for certs to be verified within a cluster
See also [cert-manager/trust](https://cert-manager.io/docs/projects/trust/)
### End-user experience
@ -55,3 +56,11 @@ Enable best-practice PKI management with cert-manager.
- Better user experience for installation, operation and use with applications
- Zero test flakiness and increased testing confidence
- Improve release process by adding more automation
### Shrinking Core
Minimise the surface area of cert-manager, reducing attack surface, binary size, container size and default deployment complexity
- Move "core" issuers with dependencies (ACME, Vault, Venafi) into external issuers, which might still be bundled by default
- Likewise, change all "core" DNS solvers into external solvers
- Provide a minimal "pick and mix" distributions of cert-manager which allow users to specify exactly which issuer types / DNS solvers they want to install