rossoctl/operator

Kubernetes operator for deploying and lifecycle management of Agents and Tools

Stars: 18
Forks: 50
Open beginner issues: 0
Indexed issues: 10
Avg merge: 3d 3h
Merged PRs (30d): 8

Dominant language: Go
License: Apache-2.0
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

10 open issues indexed

Fold bundle-service and token-broker into the operator image so they ship in releases Open

enhancement Identity

Difficulty 5/5 Over a week Newbie friendliness 35/100

rossoctl/operator#536 · 4 comments · Opened Sep 17, 2026
:bug: Align Helm chart version with repository release tag Open

kind/bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

rossoctl/operator#532 · Opened Sep 8, 2026
Enforce token-exchange/token-broker mutex at webhook admission (fail-fast) Open

enhancement go good first issue ux

Difficulty 4/5 3-5 days Newbie friendliness 66/100

rossoctl/operator#526 · 1 comment · Opened Aug 28, 2026
IBAC judge bearer token rendered into ConfigMap (plaintext) — use secretKeyRef Open

enhancement go high priority

Difficulty 4/5 3-5 days Newbie friendliness 45/100

rossoctl/operator#525 · Opened Aug 28, 2026
test(e2e): add token exchange verification tests for AgentRuntime.spec.auth.outbound routes Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rossoctl/operator#521 · Opened Aug 27, 2026
fix(crd): AgentRuntime.spec.auth.outbound[].destination.hostRegex should be documented as glob, not regex Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

rossoctl/operator#520 · Opened Aug 27, 2026
refactor: rename authproxy-routes ConfigMap to authbridge-routes for consistency Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

rossoctl/operator#519 · Opened Aug 27, 2026
feat(webhook): validate/warn when AgentRuntime.spec.auth.outbound route has multiple audiences Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

rossoctl/operator#518 · Opened Aug 27, 2026
feature: add a report-only capability-alignment evaluation Open

rossoctl/operator#492 · 6 comments · 1 assignee · Opened Jul 21, 2026
client-registration uses external KEYCLOAK_URL for server-to-server admin calls → unreachable in-cluster on Kind (client-credentials Secret never created) Open

stale

Difficulty 4/5 3-5 days Newbie friendliness 68/100

rossoctl/operator#484 · 1 comment · Opened Jul 16, 2026

A short digest of beginner-friendly GitHub issues.