weiguoqiang/cert-manager
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Adds a note about denied CertificateRequests

Browse Source 
Signed-off-by: irbekrm <irbekrm@gmail.com>
This commit is contained in:
irbekrm 2022-01-26 16:48:34 +00:00
parent 476a22b674
commit ae37a6ecbb
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
design/20220118.certificate-issuance-exponential-backoff.md
View File

@ -211,6 +211,8 @@ To ensure that `Certificate`s whose issuance is currently failing don't get rene
- In case of exponential backoff being applied, controller logs will be sufficient for users trying to debug this and understand when the next issuance will be attempted
- Applying exponential backoff in cases where issuance fails due to a denied `CertificateRequest` should not be treated differently to other failures (so exponential backoff should be applied). Currently they are treated the same and retried after 1 hour, so this is consistent with the existing behaviour
## Feature Gate
The current assumption is that exponential backoff would _not_ be placed behind a feature gate, however this should be considered.