stackabletech/secret-operator

View on GitHub

Kubernetes operator for provisioning TLS certificates, Kerberos keytabs and other secrets to pods. Part of the Stackable Data Platform (SDP).

Stars: 13
Forks: 8
Open beginner issues: 0
Indexed issues: 46
Avg merge: 1d 8h
Merged PRs (30d): 10

Dominant language: Rust
License: No license data
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

46 open issues indexed

autoTls: calculation for secure maximum certificate lifetimes so that all pods that are deployed trust every other deployed pod is too loose Open

type/bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

stackabletech/secret-operator#754 · Opened Sep 10, 2026
autoTls: bound certificate lifetime by the CA that will actually sign it, not the configured caCertificateLifetime Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

stackabletech/secret-operator#753 · 1 comment · Opened Sep 9, 2026
skip the PodListeners lookup when the served Pod is being deleted Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

stackabletech/secret-operator#720 · 1 comment · Opened Jul 8, 2026
pods get oom-killed when multiple heavy spark applications start at the same time Open

customer-request type/bug

Difficulty 3/5 1-2 days Newbie friendliness 38/100

stackabletech/secret-operator#666 · 2 comments · Opened Dec 10, 2025
Allow certificates to contain subjects with allowed external names Open

customer-request type/feature-improvement

stackabletech/secret-operator#630 · 7 comments · 1 assignee · Opened Aug 20, 2025
Add missing Pod IPs to created certificates Open

stackabletech/secret-operator#620 · 2 comments · 1 assignee · Opened Jul 17, 2025
SecretClass access control Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

stackabletech/secret-operator#613 · Opened Jun 30, 2025
Kerberos: Consider PKINIT support? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

stackabletech/secret-operator#612 · Opened Jun 24, 2025
Split controller into a separate deployment Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

stackabletech/secret-operator#607 · Opened Jun 6, 2025
k8sSearch: exclude secrets with scopes that are not requested Open

type/bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

stackabletech/secret-operator#556 · Opened Jan 29, 2025
Allow the configuration of multiple LDAP servers Open

customer-request refinement-needed type/feature-improvement

Difficulty 4/5 3-5 days Newbie friendliness 38/100

stackabletech/secret-operator#550 · 3 comments · Opened Jan 23, 2025
Allow the configuration of multiple KDCs Open

customer-request type/feature-improvement

Difficulty 3/5 1-2 days Newbie friendliness 48/100

stackabletech/secret-operator#549 · 3 comments · 3 reactions · Opened Jan 23, 2025
Split out AD details to a separate docs page Open

area/documentation

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

stackabletech/secret-operator#542 · Opened Jan 14, 2025
Configuration overrides for krb5.conf Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

stackabletech/secret-operator#529 · 1 comment · Opened Nov 30, 2024
RUSTSEC-2024-0384: `instant` is unmaintained Open

Difficulty 2/5 1-3 hours Newbie friendliness 50/100

stackabletech/secret-operator#521 · Opened Nov 11, 2024
Explicit CA rotation Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

stackabletech/secret-operator#493 · Opened Aug 26, 2024
Expire pods when secrets change Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

stackabletech/secret-operator#487 · Opened Aug 1, 2024
Distinguish TLS common names? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

stackabletech/secret-operator#464 · Opened Jul 9, 2024
Allow injecting `searchBase` and `searchFilter` via a SecretClass in ldap AuthenticationClass Open

customer-request

Difficulty 5/5 Over a week Newbie friendliness 35/100

stackabletech/secret-operator#448 · Opened Jun 18, 2024
Support for certificate transparency logs Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

stackabletech/secret-operator#443 · Opened May 22, 2024
Dependency Dashboard Open

Difficulty 4/5 3-5 days Newbie friendliness 15/100

stackabletech/secret-operator#442 · Opened May 14, 2024
Drop Client::default_namespace Open

Difficulty 1/5 Under an hour Newbie friendliness 55/100

stackabletech/secret-operator#412 · Opened May 3, 2024
Implement Debug for Client Open

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

stackabletech/secret-operator#411 · Opened May 3, 2024
Kerberos tutorial Open

area/documentation

Difficulty 4/5 3-5 days Newbie friendliness 45/100

stackabletech/secret-operator#407 · Opened Apr 22, 2024
workflow for password changes of auto created service principals for hive and hdfs Open

customer-request

Difficulty 5/5 Over a week Newbie friendliness 25/100

stackabletech/secret-operator#401 · Opened Apr 11, 2024
Auto-generate AD kerberos credential cache Secret Open

customer-request type/feature-improvement

Difficulty 3/5 1-2 days Newbie friendliness 52/100

stackabletech/secret-operator#369 · Opened Feb 8, 2024
Test AutoTLS CA rotation Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

stackabletech/secret-operator#355 · Opened Jan 29, 2024
PKCS#12 bundles use deprecated RC2 encryption algorithm Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

stackabletech/secret-operator#349 · 1 comment · Opened Jan 25, 2024
Investigate using openat to lock down file access Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

stackabletech/secret-operator#345 · Opened Jan 11, 2024
Inject secrets via a FUSE virtual filesystem Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

stackabletech/secret-operator#325 · Opened Nov 16, 2023
k8sSearch scheduling errors don't report the failing query Open

type/bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

stackabletech/secret-operator#309 · Opened Aug 28, 2023
k8sSearch: duplicate scopes override rather than replace each other Open

type/bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

stackabletech/secret-operator#308 · 1 comment · Opened Aug 28, 2023
k8sSearch with a fixed searchNamespace doesn't separate services and pods by namespace Open

type/bug

Difficulty 5/5 Over a week Newbie friendliness 30/100

stackabletech/secret-operator#307 · Opened Aug 28, 2023
Document troubleshooting guide Open

area/documentation

Difficulty 3/5 1-2 days Newbie friendliness 35/100

stackabletech/secret-operator#292 · Opened Jul 7, 2023
Document developer requirements Open

area/documentation priority/low

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

stackabletech/secret-operator#290 · Opened Jul 3, 2023
Test unprivileged mode on Openshift Open

Difficulty 4/5 3-5 days Newbie friendliness 15/100

stackabletech/secret-operator#272 · 4 comments · Opened Apr 25, 2023
Kerberos: Support adding secondary realms to the krb5.conf Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

stackabletech/secret-operator#266 · Opened Apr 18, 2023
Replace tmpfs with ramfs to prevent swap spill Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

stackabletech/secret-operator#262 · Opened Mar 31, 2023
Expire pods when `k8sSearch` secrets are modified Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

stackabletech/secret-operator#118 · Opened Apr 22, 2022
Document manual Kerberos keytab provisioning Open

Difficulty 4/5 3-5 days Newbie friendliness 15/100

stackabletech/secret-operator#96 · Opened Mar 24, 2022
Warn that manually provisioned certificates are about to expire Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

stackabletech/secret-operator#94 · Opened Mar 24, 2022
Prevent application from writing to the secret volume Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

stackabletech/secret-operator#46 · Opened Feb 7, 2022
Integration tests Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

stackabletech/secret-operator#13 · Opened Dec 1, 2021
Update secret files as required Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

stackabletech/secret-operator#11 · Opened Dec 1, 2021
Integrate with external key vaults Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

stackabletech/secret-operator#9 · 1 comment · Opened Dec 1, 2021
Split provisioning into a separate service Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

stackabletech/secret-operator#7 · Opened Dec 1, 2021

stackabletech/secret-operator

Get new issues in your inbox