werf
Three release channels at once as werf 3 takes shape beside a still-shipping 2.75.
Comparison · Infra & APIs
cert-manager vs ZoneMinder
A side-by-side editorial comparison of cert-manager and ZoneMinder — release velocity, themes, recent moves, and the top alternatives to consider.
cert-manager vs ZoneMinder: at a glance
What is cert-manager?
cert-manager's 1.21 line is about failure handling: backoff caps, renewal policies and clearer auth errors
cert-manager is running the 1.21 pre-release train through alpha.0, alpha.1 and now beta.0. The changes cluster around what happens when certificate issuance goes wrong: a configurable cap on CertificateRequest retry backoff, a new AuthFailed issuer condition that separates bad Venafi credentials from transient infrastructure failures, and certificate renewal policies.
What is ZoneMinder?
ZoneMinder 1.38 finally split capturing from analysing — and added roles to a system that had none.
ZoneMinder runs two lines in parallel. The 1.38 series, opened in February, brought role-based access control, WebRTC, Go2RTC and RTSP2Web streaming with hardware acceleration, a redesigned monitor model splitting Capturing, Analysing and Recording into separate settings, ONVIF events, MQTT and event tagging. The legacy 1.36 branch is still receiving fixes, including a stored SQL injection through event name and cause fields. The 1.38.1 release replaced four vendor-specific ONVIF implementations with a single control module.
cert-manager vs ZoneMinder: editorial side-by-side
cert-manager
0.0INFRA · APIS
cert-manager's 1.21 line is about failure handling: backoff caps, renewal policies and clearer auth errors
◆ Current state
cert-manager is running the 1.21 pre-release train through alpha.0, alpha.1 and now beta.0. The changes cluster around what happens when certificate issuance goes wrong: a configurable cap on CertificateRequest retry backoff, a new AuthFailed issuer condition that separates bad Venafi credentials from transient infrastructure failures, and certificate renewal policies.
◆ Where it's heading
This is a reliability and observability cycle rather than a feature cycle. The recurring theme is making cert-manager's failure states legible — distinguishing permanent from transient errors, bounding retry storms, and letting Helm's common labels propagate into the ACME solver resources it creates on the fly. CAInjectorMerging reaching GA and deprecated API removal point to a line that is consolidating.
◆ Prediction
Expect a 1.21.0 release candidate next, with the renewal policy work being the piece most likely to change shape before it stabilises.
ZoneMinder
0.0INFRA · APIS
ZoneMinder 1.38 finally split capturing from analysing — and added roles to a system that had none.
◆ Current state
ZoneMinder runs two lines in parallel. The 1.38 series, opened in February, brought role-based access control, WebRTC, Go2RTC and RTSP2Web streaming with hardware acceleration, a redesigned monitor model splitting Capturing, Analysing and Recording into separate settings, ONVIF events, MQTT and event tagging. The legacy 1.36 branch is still receiving fixes, including a stored SQL injection through event name and cause fields. The 1.38.1 release replaced four vendor-specific ONVIF implementations with a single control module.
◆ Where it's heading
The project is consolidating a decade of accumulated special cases: four ONVIF implementations become one, monitor function modes become independent toggles, and streaming moves onto standard components rather than bespoke paths. Meanwhile 1.36 keeps being patched for security and build compatibility, which means a substantial install base has not moved. Release engineering itself is visibly strained — 1.38.2 was abandoned mid-flight over a Debian packaging conflict.
◆ Prediction
Expect 1.38 patch releases to keep folding in security and memory-safety fixes while the 1.36 branch receives only vulnerability backports until it is retired. Whether the new streaming stack becomes the default rather than an option is not settled by these entries.
Alternatives to cert-manager and ZoneMinder
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either cert-manager or ZoneMinder.
Volatility
Volatility 3 caught up with Volatility 2, then started reorganising itself.
GLAuth
A small LDAP server that grew OpenTelemetry tracing, embedded plugins and RISC-V builds.
OctoPrint
OctoPrint 2.0 turns serial into one connector among several, and breaks plugins doing it.
CRI-O
Patch tags land monthly with release notes that itemize nothing.
Dokploy
A self-hosted PaaS spending its releases on secrets, injection fixes and plan limits.
See all cert-manager alternatives → · See all ZoneMinder alternatives →
Recent activity from cert-manager and ZoneMinder
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1mo agocert-managerv1.21.0-beta.0
- 1mo agoZoneMinder1.38.3 supersedes an abandoned 1.38.2 build
- 1mo agocert-managerv1.21.0-alpha.1
- 4mo agocert-managerv1.21.0-alpha.0
- 5mo agoZoneMinderStored SQL injection patched on the 1.36 branch
- 5mo agoZoneMinderOne ONVIF module replaces four vendor implementations
- 6mo agoZoneMinder1.38 adds RBAC, WebRTC, and splits monitor functions ⚡
- 7mo agoZoneMinderFFmpeg 8.0 build fixes on the legacy branch
- 10mo agoZoneMinderPath handling and Debian trixie build support
Frequently asked questions
What is the difference between cert-manager and ZoneMinder?
They serve adjacent needs but don't currently overlap on shipped themes. cert-manager and ZoneMinder are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is cert-manager better than ZoneMinder?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. cert-manager and ZoneMinder are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to cert-manager?
Top cert-manager alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "cert-manager alternatives" section above for the current picks, or visit /alternatives/cert-manager for the full list with editorial commentary on each.
What are the best alternatives to ZoneMinder?
Top ZoneMinder alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "ZoneMinder alternatives" section above for the current picks, or visit /alternatives/zoneminder for the full list with editorial commentary on each.