Requesting to be a maintainer for Fulcio

[haydentherapper]

I would like to nominate myself to be a maintainer and approver on Fulcio.

I have a strong background in PKI, having developed two cloud-based certificate authorities (GCP CA Service, GCP Mesh CA). I have previously worked on integrating with OIDC, so I am also very familiar with Fulcio's authentication.

I've developed multiple significant features for Fulcio, including:

• Adding a KMS-backed intermediate CA
• Support for embedded SCTs
• Adding support for URI and Username based OIDC providers
• CSR support

I've made changes to make issued certificates compliant with public standards [1, 2]. Increasing compliance makes it easier for those who want to run their own instance of Fulcio while using certificate libraries built around public standards.

While not in Fulcio's codebase, I've also made multiple changes to Cosign to support intermediate certificates.

I have a holistic understanding of the service and its design choices, which allows me to provide useful feedback in reviews, including providing PKI expertise and comments on API design. I understand what constitutes a breaking change or what design choice would have an impact on the PKI.

I've contributed significantly to developer documentation [1, 2, 3].

I've set up load testing for Fulcio.

I'm active on the issue tracker, proposing new features, finding bugs, or cleaning up stale issues.

[bobcallaway]

+1 - thanks for all the hard work and looking forward to future contributions!

[lukehinds]

+1 from me!

[dlorenc]

+1!

[mattmoor]

+1

[cpanato]

huge +1