-
Notifications
You must be signed in to change notification settings - Fork 2
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Add longDescription field to NebariApp.spec.landingPage
type: enhancement 💅🏼New feature or requestNew feature or requestStatus: Open.#181 In nebari-dev/nebari-operator;- Status: Open.#171 In nebari-dev/nebari-operator;
- Status: Open.#169 In nebari-dev/nebari-operator;
- Status: Open.#168 In nebari-dev/nebari-operator;
Epic: Security assessment remediation (v0.1.0-alpha.20)
area: securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardeningepicEpic: tracks a group of related issuesEpic: tracks a group of related issuesStatus: Open.#166 In nebari-dev/nebari-operator;security: user-provided TLS Secrets are not cryptographically or semantically validated
area: securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardeningpriority: low 🌱Low priority - nice to haveLow priority - nice to havetype: bug 🐛Something isn't workingSomething isn't workingStatus: Open.#165 In nebari-dev/nebari-operator;security: identity and credential reconciliation is additive with incomplete cleanup
area: securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardeningpriority: medium ⚡Medium priority - standard queueMedium priority - standard queuetype: tech debt 🧹Technical debt and code quality improvementsTechnical debt and code quality improvementsStatus: Open.#164 In nebari-dev/nebari-operator;security: build uses a stale Go patch and lacks govulncheck, image-scan, and SBOM gates
area: securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardeningpriority: medium ⚡Medium priority - standard queueMedium priority - standard queuetype: maintenance 🛠Day-to-day maintenance tasksDay-to-day maintenance tasksStatus: Open.#163 In nebari-dev/nebari-operator;security: broad Kubernetes and Keycloak authority lacks network containment
area: securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardeningpriority: medium ⚡Medium priority - standard queueMedium priority - standard queuetype: tech debt 🧹Technical debt and code quality improvementsTechnical debt and code quality improvementsStatus: Open.#162 In nebari-dev/nebari-operator;security: token exchange trusts every peer NebariApp client in the realm
area: securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardeningpriority: medium ⚡Medium priority - standard queueMedium priority - standard queuetype: tech debt 🧹Technical debt and code quality improvementsTechnical debt and code quality improvementsStatus: Open.#161 In nebari-dev/nebari-operator;security: cross-namespace Service backends lack target-owner consent and leak an existence oracle
area: securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardeningpriority: medium ⚡Medium priority - standard queueMedium priority - standard queuetype: tech debt 🧹Technical debt and code quality improvementsTechnical debt and code quality improvementsStatus: Open.#160 In nebari-dev/nebari-operator;security: generic-oidc issuerURL is unvalidated (gateway-side SSRF and client-secret exposure)
area: securitySecurity vulnerabilities and hardeningSecurity vulnerabilities and hardeningpriority: medium ⚡Medium priority - standard queueMedium priority - standard queuetype: bug 🐛Something isn't workingSomething isn't workingStatus: Open.#159 In nebari-dev/nebari-operator;