C&I Projects Receive queue

Issues that may be waiting for our response
NOTE: for this to work properly, GitHub token must have read access to read organization members

Receive queue

117 unique items

Completion ETA: ~2026-05-05

Assi	Bugs awaiting follow-up	Features awaiting follow-up
		conjur#1787 Conjur debian package is updated to exclude irrelevant files and directories 🌊
		secrets-provider-for-k8s#549 Secrets rotation improvements 🌊
nobody	conjur#1753 Conjur policy reload does not update annotations in APPEND mode secretless-broker#704 fs_watcher has a goroutine leak conjur-oss-helm-chart#177 Conjur does not start with an external Postgres database due to OpenSSL internal error, assertion failed: Low level API call to digest SHA256 forbidden in FIPS mode conjur-oss-helm-chart#133 Instructions fail when LoadBalancer service defines a hostname instead of an IP for the LB ingress conjur-oss-helm-chart#130 Failure in Conjur schema migrations of external DB can't recover conjur-oss-helm-chart#68 Helm deployment instructions (README) include architecture diagrams summon#152 Clean up empty tempdirs conjur-authn-k8s-client#172 Enable use of system CA store for Conjur's SSL certificate verification secrets-provider-for-k8s#530 retryCountLimit not evaluated in helm deployment sidecar-injector#93 TLS handshake error when following README in local cluster cloudfoundry-conjur-buildpack#82 The secrets.yml check in the supply script uses different logic than the `conjur-env` binary to find the secrets.yml ansible-conjur-collection#191 Unable to run cyberark.conjur.conjur_host_identity role. conjur-puppet#258 Error with self signed certificate	conjur#2062 A test setup exists for testing simplified authn client config conjur#1964 Update upgrade process: separate schema and data restoration conjur#1958 Adding recursive permit statements conjur#1718 Configure SSL certs/keys and postgres ssl_mode conjur#1557 Extend rake task to get next available trackable log message code conjur#1265 Kubernetes authenticator supports container-level application identity conjur#840 Kubernetes authenticator has a service account token option secretless-broker#1342 Migrate to a new method for running the Secretless health check secretless-broker#1336 There should be capabilities in `secretless.yml` to supply custom settings to providers secretless-broker#1324 Generic HTTP Connector: OAuth1 supports different signature hashing methods secretless-broker#1312 Create a Docker CLI Connector for Secretless secretless-broker#1283 There is an example generic HTTP connector config for Salesforce secretless-broker#1279 There is an example generic HTTP connector config for the Kubernetes API secretless-broker#1262 There is an example generic HTTP connector config for the Google Cloud SDK secretless-broker#1222 Secretless has a Cassandra DB connector secretless-broker#1213 Secretless has a DB2 connector secretless-broker#1205 TLS Connectors share a structure for connection details secretless-broker#1182 Secretless configuration files support ssl configuration information secretless-broker#1178 Secretless optionally supports encryption for the client-to-Secretless connection secretless-broker#1171 Add Unix socket flow to Kubernetes tutorial secretless-broker#1152 Proxyservice package is unit tested secretless-broker#1097 Database clients receive a meaningful error when a new connection request has bad credentials secretless-broker#1094 Secretless has configurable connection timeouts for connectors secretless-broker#1065 Broker can delegate basic sanity checks on `credentials` keys to plugins secretless-broker#1063 Broker does early verification of plugin parameters secretless-broker#1011 ForceSSL defaults to true secretless-broker#980 Secretless transmits packets after authentication without transforming them secretless-broker#979 Add `--allow-builtin-plugin-overrides` CLI argument secretless-broker#957 Re-evaluate ConnectionManager API secretless-broker#940 Add better logic when we can't open a tcp socket secretless-broker#934 Tests are added for external_plugins.go secretless-broker#836 Improve support for configuration CRDs secretless-broker#834 Secretless supports plugin types besides connectors secretless-broker#822 Make our plugin system work on windows secretless-broker#715 CRDs are updated to use v2 configuration format secretless-broker#645 Jekyll can create foldable content from markdown secretless-broker#592 Simplify ConfigureBackend in database handlers secretless-broker#514 Providers retrieve secret values per connection in batches if possible secretless-broker#510 AWS Secrets credential provider has integration tests secretless-broker#493 Conjur authentication logic is removed from the provider secretless-broker#477 Secretless quick start demo instructions are clear about flow secretless-broker#473 Secretless optionally retries connections secretless-broker#467 HTTP response times are measured secretless-broker#466 SSH throughput is measured secretless-broker#465 MySQL query response times are measured secretless-broker#383 Broker is secure secretless-broker#381 Broker has additional configuration options secretless-broker#379 Performance metrics are published secretless-broker#374 A pass-through listener exists secretless-broker#270 SSH agent only keeps loaded keys for the duration of connection secretless-broker#260 Add MongoDB handler/listener helm-charts#12 Helm charts repo is updated after new helm chart release conjur-oss-helm-chart#167 Add nodeSelector to list of Chart Parameters conjur-oss-helm-chart#142 Add check/warning for pre-existing ClusterRole in Kubernetes example scripts conjur-oss-helm-chart#139 Make conjur proxy container optional and configurable conjur-oss-helm-chart#136 Add option to auto-create a Conjur data encryption key conjur-oss-helm-chart#135 Add deprecation warnings to NOTES.txt conjur-oss-helm-chart#134 Deprecated features to consider for removal for next major release (3.0.0) conjur-oss-helm-chart#132 Add authn-k8s demo app E2E test based on KinD GitHub actions conjur-oss-helm-chart#131 Eliminate redundant Kubernetes service for Conjur conjur-oss-helm-chart#104 Reorganize README.md KinD example to make it more of a Getting Started guide conjur-oss-helm-chart#86 Document use of or add subchart for bitnami/postgresql conjur-oss-helm-chart#54 Automated end-to-end testing suite conjur-oss-helm-chart#46 Adds TLS between Conjur and posgres pod conjur-oss-helm-chart#7 Conjur Helm chart has published shasums conjur-api-ruby#186 Migrate client configuration from `conjur-cli` gem to this gem conjur-api-java#102 Add ability to pass in CONJUR_APPLIANCE_URL and CONJUR_ACCOUNT into Conjur class conjur-api-java#99 Unit tests exist for each class summon#251 Default not supported for `gopass` summon#153 Multiple `-e` environments can be supported summon#151 Add more information about `!file` handling summon#149 Summon has examples of unofficial "provider wrappers" somewhere (e.g. `gopass`) summon#135 Zeroize all vars right after start of child process summon-aws-secrets#48 Tests exist for `main.go` summon-aws-secrets#44 Ability to specify versions of secrets to retrieve summon-s3#22 Apple silicon is not supported for this provider conjur-authn-k8s-client#291 The Namespace prep helm test uses validator Host ID to validate the Kubernetes authenticator is functional conjur-authn-k8s-client#290 The Namespace helm test queries the /info endpoint for validation conjur-authn-k8s-client#289 There is an initial framework for the Namespace prep Helm test conjur-authn-k8s-client#222 Enable cloud provided authentication methods in sidecar secrets-provider-for-k8s#289 Add optional hostAliases to values.yaml secrets-provider-for-k8s#239 Add GH action for dispatching release event kubernetes-conjur-deploy#99 Don't use separate yamls for OC and K8s where possible kubernetes-conjur-deploy#55 Tests include coverage of master deployment to both GKE and OpenShift kubernetes-conjur-demo#135 Add validator host ID to allow authn-k8s config to be validated kubernetes-conjur-demo#130 Automated tests only run against annotation-based identities kubernetes-conjur-demo#115 Add DeploymentConfigs as app identity in Jenkins OpenShift CI kubernetes-conjur-demo#113 Replace use of sed for yaml templating with Yaml.sh or helm charts cloudfoundry-conjur-buildpack#91 Users can determine buildpack version from Cloud Foundry cloudfoundry-conjur-buildpack#80 Secrets.yml configuration can be supplied as an environment variable ansible-conjur-collection#56 Collection is published to Automation Hub ansible-conjur-collection#49 Add other ways to specify Conjur / DAP identity in `cyberark.conjur.conjur_variable` ansible-conjur-collection#46 Roles are tested with Molecule ansible-conjur-collection#45 The log output of the conjur-role without "no_log" set to true has been reviewed ansible-conjur-collection#44 Roles and plugins share a build stage and test directory structure ansible-conjur-collection#42 Expand Ansible Collection to include Conjur Role ansible-conjur-host-identity#30 Migrate this Ansible role to the Conjur Ansible collection ansible-conjur-host-identity#26 conjur_variable lookup plugin can be improved conjur-puppet#201 Investigate (and possibly implement) ability to check if we can validate that agent credentials are valid terraform-provider-conjur#132 Add an ability to update Conjur secret terraform-provider-conjur#60 Add unit tests terraform-provider-conjur#53 Add Windows instructions to README