Search results

feature: add a report-only Agent Drift evaluation

Status: Open.

#492 In rossoctl/operator;

· kevincogan opened on Jul 21, 2026

client-registration uses external KEYCLOAK_URL for server-to-server admin calls → unreachable in-cluster on Kind (client-credentials Secret never created)

Status: Open.

#484 In rossoctl/operator;

· cwiklik opened on Jul 16, 2026

feat: replace spiffe-helper sidecar with direct go-spiffe SDK call for operator JWT-SVID auth

Status: Open.

#477 In rossoctl/operator;

· Alan-Cha opened on Jul 12, 2026

feature: Add Operator Controlled process for obtaining hierarchical Rego+Data and creating per-PDP ConfigMap

Status: Open.

#469 In rossoctl/operator;

· davidhadas opened on Jun 23, 2026

AuthBridge webhook does not emit spiffe block in per-agent ConfigMap

Status: Open.

#467 In rossoctl/operator;

· r3v5 opened on Jun 23, 2026

Helm chart missing OpenShift SCC for AuthBridge sidecars

Status: Open.

#460 In rossoctl/operator;

· r3v5 opened on Jun 22, 2026

fix(e2e): kind load docker-image fails on Apple Silicon with containerd image store

Status: Open.

#454 In rossoctl/operator;

· akram opened on Jun 20, 2026

fix(webhook): add defensive check for spireEnabled vs identity.type=spiffe lockstep

Status: Open.

#453 In rossoctl/operator;

· akram opened on Jun 20, 2026

fix(webhook): warn when identity.type=spiffe is emitted without jwt_audience

Status: Open.

#452 In rossoctl/operator;

· akram opened on Jun 20, 2026

Pipeline token-exchange missing jwt_audience/jwt_svid_path when identity.type=spiffe

Status: Open.

#443 In rossoctl/operator;

· akram opened on Jun 17, 2026

Bug: SharedTrust and MLflow controllers block all reconciliation when RBAC is missing

Status: Open.

#440 In rossoctl/operator;

· akram opened on Jun 16, 2026

Proxy-sidecar: cooperative egress mode opt-out for platforms without iptables (ROSA HCP)

Status: Open.

#435 In rossoctl/operator;

· akram opened on Jun 16, 2026