On cert-manager v1.21.2, a renewal-blocked Certificate kept Ready=True ("Certificate is up to date and has not expired") past notAfter through our 30-minute window, until a restart reconciled it.
Human judgment is out. Measurement is in. But tilting too far in one direction carries enormous costs, says author Jerry Z. Muller, in this opinion piece.…Read More