# cert-manager v1.20.1

- Product: cert-manager (https://whatsnew.fyi/product/cert-manager)
- Vendor: CNCF
- Date: 2026-03-27
- Version: v1.20.1
- Original notes: https://github.com/cert-manager/cert-manager/releases/tag/v1.20.1
- Permalink: https://whatsnew.fyi/product/cert-manager/releases/v1.20.1

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Fixed duplicate parentRef bug when both issuer config and annotations are present in Gateway API
- **fixed** — Add missing issuer finalizer RBAC to the order controller to support owner references, fixing OpenShift upgrade issues
- **changed** — Bump google.golang.org/grpc to address a reported vulnerability

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.20.1 fixes an issue for OpenShift users that has to do with the finalizer RBAC, bumps gRPC to address a reported non-affecting vulnerability, and fixes a duplicate `parentRef` bug when both issuer config and annotations are present (Gateway API).

###### Bug or Regression

- Fixed duplicate `parentRef` bug when both issuer config and annotations are present. (#8658, @hjoshi123)
- Add missing issuer finalizer RBAC to the order controller to support owner references. This was preventing OpenShift users from being able to upgrade to v1.20.0. (#8655, @erikgb)
- Bump google.golang.org/grpc to fix vulnerability reported by scanners. This isn't a vulnerability that affects cert-manager, but we are bumping it because it is reported by scanners. (#8657, @erikgb)