Thore Cimbal 44a884062d cert-manager: step 6 of 7 — v1.19.6 to v1.20.3 (#0051) ...

This is the step with the RBAC narrowing: the cert-manager-edit aggregate
ClusterRole no longer grants create on challenges or create, patch and update on
orders. Those resources belong to cert-manager's own ACME workflow. Nothing here
is bound to that ClusterRole — zero bindings across all namespaces — so no
tooling loses a permission it was using.

Previous step verified: three deployments on v1.19.6, fifteen certificates
Ready.

2026-08-21 12:00:00 +00:00

..

authentik

authentik: arm the automatic rollback again, the jump is done (#0051)

2026-08-21 12:00:00 +00:00

base

cert-manager: step 6 of 7 — v1.19.6 to v1.20.3 (#0051)

2026-08-21 12:00:00 +00:00

monitoring

netpol: wave 3 — the two namespaces the issue never mentioned (#0088)

2026-08-21 12:00:00 +00:00

production

netpol: wave 4 — the authentication service loses its outbound too (#0088)

2026-08-21 12:00:00 +00:00