open-policy-agent / open-policy-agent/cert-controller
Allow supporting both the new and old key in the webhook configs during key rotation
Open
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 109
- Forks
- 49
- Avg merge
- 19h 20m
- Merged PRs (30d)
- 6
Description
This will prevent the old key from being marked as invalid before the new key is 100% distributed
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files or tests are named. Start by locating the webhook configuration and key validation or distribution entry points, then trace where the old key is marked invalid during rotation. Done means configurations accept both the new and old keys while the new key is being distributed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100