All issues

Search results

test(e2e): add token exchange verification tests for AgentRuntime.spec.auth.outbound routes

Status: Open.

#521 In rossoctl/operator;

· Alan-Cha opened on Aug 27, 2026

fix(crd): AgentRuntime.spec.auth.outbound[].destination.hostRegex should be documented as glob, not regex

Status: Open.

#520 In rossoctl/operator;

· Alan-Cha opened on Aug 27, 2026

refactor: rename authproxy-routes ConfigMap to authbridge-routes for consistency

Status: Open.

#519 In rossoctl/operator;

· Alan-Cha opened on Aug 27, 2026

feat(webhook): validate/warn when AgentRuntime.spec.auth.outbound route has multiple audiences

Status: Open.

#518 In rossoctl/operator;

· Alan-Cha opened on Aug 27, 2026

feature: add a report-only capability-alignment evaluation

Status: Open.

#492 In rossoctl/operator;

· kevincogan opened on Jul 21, 2026

client-registration uses external KEYCLOAK_URL for server-to-server admin calls → unreachable in-cluster on Kind (client-credentials Secret never created)

Status: Open.

#484 In rossoctl/operator;

· cwiklik opened on Jul 16, 2026

feat: replace spiffe-helper sidecar with direct go-spiffe SDK call for operator JWT-SVID auth

Status: Open.

#477 In rossoctl/operator;

· Alan-Cha opened on Jul 12, 2026

AuthBridge webhook does not emit spiffe block in per-agent ConfigMap

stale

Status: Open.

#467 In rossoctl/operator;

· r3v5 opened on Jun 23, 2026

Helm chart missing OpenShift SCC for AuthBridge sidecars

stale

Status: Open.

#460 In rossoctl/operator;

· r3v5 opened on Jun 22, 2026

fix(e2e): kind load docker-image fails on Apple Silicon with containerd image store

stale

Status: Open.

#454 In rossoctl/operator;

· akram opened on Jun 20, 2026

fix(webhook): add defensive check for spireEnabled vs identity.type=spiffe lockstep

stale

Status: Open.

#453 In rossoctl/operator;

· akram opened on Jun 20, 2026

fix(webhook): warn when identity.type=spiffe is emitted without jwt_audience

stale

Status: Open.

#452 In rossoctl/operator;

· akram opened on Jun 20, 2026