Samantha Frank

Using the tables and gRPC methods added in #5947 we should implement immediate renewals for impacted certificates whose renewals are managed by ARI aware clients.

Improve rate limit docs and error for "too many registrations for this IP..."

2

- [ ] Draft and ship a docs page for "too many registrations for this IP range..." at `https://letsencrypt.org/docs/too-many-registrations-for-this-ip/` - [ ] Point the Rate Limits error emitted by RA...

tools: Add hotfix release script

1

The process of creating a new hot fix release is entirely manual and prone to human error. This script automates a fair bit of the process and includes detailed instructions...

Remove deprecated throughput settings from akamai-purger

2

Config key `purgeInterval` is deprecated. Once this key has been removed from all staging and production configs we can remove all relevant codepaths (see comments `TODO(#6003)`) from the akamai-purger.

Use an non-wrapped sql.Db client to iterate over results and return them on a channel.

Make 'incomplete GRPC request' errors easier to trace

2

Many of GRPC methods perform some amount of request validation and then immediately construct requests to be dispatched to other component via an inner GRPC client. When one of these...

We currently use ProxySQL in production but have yet to backport this change into our dev (docker) stack.

Creating an "overarching" configurable ceremony type

4

Captured from a conversation that @aarongable and I had: Create a new ceremony config which acts as a meta-config, saying "process these config files in this order, sending the outputs...

- Automates the existing release process - Automates the emergency release process - Automates the break-glass (github is hard down) release process: - Produce file containing the contents of a...

- Make it a struct in SA - Use reflect to create a method that returns the fields in slice - Use the above method to validate that core.CertificateStatus is...