redhat-cop/vault-config-operator

View on GitHub

An operator to support Haschicorp Vault configuration workflows from within Kubernetes

Stars: 165
Forks: 68
Open beginner issues: 0
Indexed issues: 52
Avg merge: 3h 35m
Merged PRs (30d): 2

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 3, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

52 open issues indexed

Upgrade from 0.8.49 to 0.8.52 via Catalog fails due to numerous missing CRD, SA, and RBACs Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

redhat-cop/vault-config-operator#366 · 2 comments · Opened Aug 24, 2026
VaultSecret spec.output.type required Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

redhat-cop/vault-config-operator#363 · 9 comments · 1 reaction · Opened Aug 20, 2026
ACME support for PKISecretEngineConfig Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

redhat-cop/vault-config-operator#358 · Opened Aug 16, 2026
Default refreshPeriod on VautlSecret creates an infinite check loop and spams Vault Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

redhat-cop/vault-config-operator#355 · Opened Aug 14, 2026
Allow overriding certificate issuerRef Open

Difficulty 3/5 1-2 days Newbie friendliness 75/100

redhat-cop/vault-config-operator#351 · Opened Aug 6, 2026
GroupAlias.spec.name pattern too restrictive for real-world IdP group/role names (blocks uppercase & underscores) Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

redhat-cop/vault-config-operator#344 · Opened Jul 16, 2026
v0.8.50: Manager crash-loops because the Namespace CRD is not shipped with the Helm chart Open

Difficulty 1/5 Under an hour Newbie friendliness 88/100

redhat-cop/vault-config-operator#343 · 2 reactions · Opened Jul 16, 2026
Feature: source token_reviewer_jwt from a Secret in KubernetesAuthEngineConfig Open

Difficulty 4/5 3-5 days Newbie friendliness 56/100

redhat-cop/vault-config-operator#342 · Opened Jul 16, 2026
v0.8.50: AuthEngineMount create rejected at admission with default settings Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

redhat-cop/vault-config-operator#341 · 2 reactions · Opened Jul 16, 2026
Operator Reconciliation reverts rotated root Credential in Database Secret Engine leading to lost Credentials Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

redhat-cop/vault-config-operator#339 · Opened Jul 10, 2026
Root password rotation can repeat if the status marker is not written Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

redhat-cop/vault-config-operator#336 · Opened Jul 5, 2026
Existing secret values get recreated via RandomSecret even when no rotation is configured and policy is Retain (after #300) Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

redhat-cop/vault-config-operator#313 · 1 comment · Opened Apr 13, 2026
Feature request: LDAP secrets engine Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#304 · Opened Mar 3, 2026
Helm chart global image registry configuration Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

redhat-cop/vault-config-operator#298 · 1 comment · Opened Jan 21, 2026
DatabaseSecretEngineConfig priviledged user's password from kubernetes secret not updating. Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

redhat-cop/vault-config-operator#297 · 6 comments · Opened Jan 19, 2026
Can't create resources in a child namespace while authenticating to a parent namespace Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

redhat-cop/vault-config-operator#291 · Opened Nov 21, 2025
Feature: allow AuthEngineMount to mount directly at /auth/<path> (without /<name>) Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

redhat-cop/vault-config-operator#283 · 3 comments · 1 reaction · Opened Aug 22, 2025
DatabaseSecretEngineStaticRole rotation config Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

redhat-cop/vault-config-operator#280 · Opened Jul 16, 2025
Reference members in Group via Name Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

redhat-cop/vault-config-operator#279 · 2 reactions · Opened Jul 11, 2025
OLM Upgrade to v0.8.31 Breaks kube-rbac-proxy Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

redhat-cop/vault-config-operator#274 · 2 comments · Opened May 15, 2025
vault-config-operator not listed on operatorhub Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#267 · Opened Mar 18, 2025
Using vault v2 secrets for JWTOIDCAuthEngineConfig Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#262 · 3 comments · Opened Feb 27, 2025
Question about Reconcilation for KubernetesAuthEngineConfig and KubernetesSecretEngineConfig Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

redhat-cop/vault-config-operator#261 · 1 comment · 2 reactions · Opened Jan 31, 2025
Following documentation to contribute new Vault API does not seem to work Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#257 · Opened Jan 16, 2025
Setting LdapAuthEngineConfig.spec.bindCredentials.vaultSecret makes operator crash Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#255 · 2 comments · 2 reactions · Opened Dec 31, 2024
Multiple Kubernetes clusters using one vault cluster Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

redhat-cop/vault-config-operator#254 · 8 reactions · Opened Dec 8, 2024
Feature Request - Support for multiple Vault clusters Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

redhat-cop/vault-config-operator#251 · Opened Jul 30, 2024
Feature Request - Rate Limiting with Resource Quotas Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

redhat-cop/vault-config-operator#249 · 1 reaction · Opened Jul 22, 2024
RandomSecret batch create keys Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

redhat-cop/vault-config-operator#234 · 2 reactions · Opened May 10, 2024
password_authentication support for databaseSecretEngineConfig Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#230 · 1 comment · Opened Feb 7, 2024
add support for kv v2 in databasesecretengineconfig Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

redhat-cop/vault-config-operator#229 · 2 comments · Opened Feb 2, 2024
npe if vault secret is not defined in databasesecretengineconfig Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

redhat-cop/vault-config-operator#228 · Opened Feb 2, 2024
Add to Datatree CRDS-catalog Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

redhat-cop/vault-config-operator#224 · Opened Jan 9, 2024
Helm install does not install - `no matches for kind "ServiceMonitor" in version "monitoring.coreos.com/v1" ensure CRDs are installed first` Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#221 · 1 comment · Opened Jan 4, 2024
Dependency Dashboard Open

Difficulty 4/5 3-5 days Newbie friendliness 15/100

redhat-cop/vault-config-operator#208 · Opened Dec 4, 2023
GitHubSecretEngineConfig referencing vaultSecret fails with panic error Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

redhat-cop/vault-config-operator#205 · 5 comments · Opened Nov 6, 2023
Internal eventing and reconciliation logic are missing key trace info for troubleshooting purpose Open

Difficulty 4/5 3-5 days Newbie friendliness 28/100

redhat-cop/vault-config-operator#193 · Opened Sep 14, 2023
Upgrading an already installed vault-config-operator helm chart is failing because new CRDs are missing Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

redhat-cop/vault-config-operator#192 · Opened Sep 14, 2023
KubernetesAuthEngineRole unknown field "spec.targetNamespaceSelector" Open

redhat-cop/vault-config-operator#178 · 2 comments · 1 assignee · Opened Jul 24, 2023
manage resource status updates in the right order Open

redhat-cop/vault-config-operator#169 · 1 assignee · Opened Jun 30, 2023
authEngineMount edit failed Open

redhat-cop/vault-config-operator#151 · 1 assignee · Opened May 29, 2023
SecretEngineMount kv have short operator lease ? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

redhat-cop/vault-config-operator#141 · Opened Apr 19, 2023
New leases are generated roughly once per second for DatabaseSecretEngineRole used with VaultSecret Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#138 · 1 comment · 1 reaction · Opened Apr 17, 2023
Namespace deletion hangs when containing vault-config-operator custom resources Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#133 · 8 comments · 1 reaction · Opened Mar 6, 2023
VaultSecret refreshPeriod : default behavior with default configurations Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#129 · 6 comments · Opened Feb 24, 2023
Retries for DatabaseSecretEngineStaticRole are too aggressive Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

redhat-cop/vault-config-operator#114 · 5 comments · Opened Jan 14, 2023
Reconciling DatabaseSecretEngineConfig logs in twice instead of once. Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

redhat-cop/vault-config-operator#113 · 4 comments · Opened Jan 14, 2023
Consolidate Helm Integration Testing Strategy Open

enhancement

redhat-cop/vault-config-operator#49 · 1 comment · 1 assignee · Opened Apr 12, 2022
Parameterize hardcoded image references in Makefile Open

enhancement

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

redhat-cop/vault-config-operator#48 · 1 comment · Opened Apr 12, 2022
[quay-secret-engine] provide way to create tokens that apply to an entire org Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

redhat-cop/vault-config-operator#47 · 1 comment · Opened Apr 12, 2022

redhat-cop/vault-config-operator

Get new issues in your inbox