vmware/pinniped

View on GitHub

Pinniped is the easy, secure way to log in to your Kubernetes clusters.

Stars: 739
Forks: 85
Open beginner issues: 0
Indexed issues: 99
Avg merge: 5d 5h
Merged PRs (30d): 1

Dominant language: Go
License: Apache-2.0
Last GitHub push: Aug 26, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

99 open issues indexed

Add support for setting custom labels on Concierge impersonation proxy Services through the CredentialIssuer API. Open

Difficulty 4/5 3-5 days Newbie friendliness 65/100

vmware/pinniped#3233 · Opened Aug 10, 2026
Add device code flow support Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

vmware/pinniped#3225 · 1 reaction · Opened Aug 6, 2026
Feature: Bearer token (JWT) authentication mode for the impersonation proxy Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

vmware/pinniped#3184 · Opened Jul 10, 2026
Logout not Possible when using Pinniped with Webapplication. Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#2941 · 2 comments · Opened Feb 19, 2026
CLI on Mac creates config on root user Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

vmware/pinniped#2911 · 1 comment · Opened Feb 9, 2026
Support Okta headless login with MFA Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

vmware/pinniped#2777 · Opened Dec 3, 2025
Export Prometheus Metrics Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

vmware/pinniped#2719 · 1 reaction · Opened Nov 7, 2025
Add new audit log event when an OIDC IDP grants different scopes than requested Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#2351 · Opened Apr 30, 2025
Add a `pinniped logout` command Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

vmware/pinniped#2180 · 4 comments · 3 reactions · Opened Jan 10, 2025
docs: site: add guide for setting up Pinniped with high availability, redundancy and best practices for scalability Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

vmware/pinniped#2164 · 1 comment · 1 reaction · Opened Dec 24, 2024
We are seeing consistent throttling in the sleeper container Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

vmware/pinniped#2161 · 4 comments · Opened Dec 16, 2024
Add new K8s version v1.32 Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

vmware/pinniped#2157 · 3 comments · Opened Dec 11, 2024
docs: site: Add GitLab CI/CD example for JWT Auth Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

vmware/pinniped#2146 · 12 comments · Opened Nov 28, 2024
Pinniped server CORS headers missing Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

vmware/pinniped#2132 · 7 comments · Opened Nov 19, 2024
ActiveDirectoryIdentityProvider user session expire time Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#2104 · 2 comments · Opened Nov 8, 2024
Aggregate APIs should not have name `Generic API Server` Open

enhancement priority/undecided

Difficulty 5/5 Over a week Newbie friendliness 25/100

vmware/pinniped#1645 · 1 comment · Opened Aug 28, 2023
API Discovery (`kubectl explain`) should work for OpenAPIv3 and aggregate APIs Open

enhancement priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#1643 · Opened Aug 25, 2023
Reference a secret instead of directly pasting a base64 encoded pem file to TLSspec.certificateAuthorityData Open

enhancement state/started

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#1570 · 3 comments · Opened Jul 6, 2023
Support transformations/policies based on values from OIDCIdentityProvider additionalClaimMappings Open

enhancement priority/undecided

Difficulty 5/5 Over a week Newbie friendliness 35/100

vmware/pinniped#1449 · Opened Mar 8, 2023
Support LDAPS client certificates Open

enhancement good first issue priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#1425 · 3 comments · Opened Feb 24, 2023
Add Kubenetes 101 authentication doc Open

enhancement priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#1392 · Opened Jan 25, 2023
Add docs for the specific benefits of using the Pinniped Supervisor Open

enhancement priority/backlog

Difficulty 3/5 1-2 days Newbie friendliness 35/100

vmware/pinniped#1377 · Opened Jan 19, 2023
Add docs for how the various flows work: cli vs browser flow, and overview of all tokens/creds with lifetimes Open

enhancement priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 45/100

vmware/pinniped#1376 · 1 comment · Opened Jan 19, 2023
Can we simplify FIPS compatibility? Open

chore priority/backlog state/started

vmware/pinniped#1373 · 1 assignee · Opened Jan 18, 2023
Superfluous error logs when only `ImpersonationProxy` strategy is available Open

enhancement priority/undecided

Difficulty 3/5 1-2 days Newbie friendliness 45/100

vmware/pinniped#1370 · 1 comment · 1 reaction · Opened Jan 17, 2023
Make extraFields check configurable by the user Open

enhancement priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 42/100

vmware/pinniped#1242 · 1 comment · Opened Jul 28, 2022
Support cert-manager for Generated Certificates Open

enhancement priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#1238 · 7 comments · 3 reactions · Opened Jul 20, 2022
Allow Dynamic Certificate Cert/Keys in Generated Secret Open

enhancement priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#1237 · 1 comment · 3 reactions · Opened Jul 20, 2022
[Proposal] Audit logging Open

proposal-tracking

Difficulty 5/5 Over a week Newbie friendliness 20/100

vmware/pinniped#1141 · Opened Apr 21, 2022
Provide support for a corporate compliance warning when authenticating Open

enhancement priority/undecided

Difficulty 5/5 Over a week Newbie friendliness 25/100

vmware/pinniped#1105 · 1 comment · 1 reaction · Opened Mar 31, 2022
Allow users to customize the CA of impersonation proxy to use with ingress Open

enhancement priority/undecided

Difficulty 5/5 Over a week Newbie friendliness 35/100

vmware/pinniped#1104 · 4 comments · Opened Mar 31, 2022
Use go 1.19's soft memory limit when it is released Open

chore state/started

vmware/pinniped#1103 · 4 comments · 1 assignee · Opened Mar 31, 2022
Add support to include LoadBalancerSourceRanges in the impersonator service config Open

enhancement priority/undecided

Difficulty 3/5 1-2 days Newbie friendliness 42/100

vmware/pinniped#1064 · 2 comments · 2 reactions · Opened Mar 15, 2022
Unnecessary requests made during token refresh Open

bug priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 20/100

vmware/pinniped#1046 · 1 comment · Opened Mar 3, 2022
Consider token lifetime extension semantics of TCR API Open

chore priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 38/100

vmware/pinniped#1027 · 1 comment · Opened Feb 19, 2022
Use GKE workload identity with cert-manager in docs Open

enhancement good first issue priority/undecided

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

vmware/pinniped#1026 · 1 reaction · Opened Feb 18, 2022
Chore: Add tests for `PerformRefresh` function to `ldap_client_test.go` Open

chore priority/undecided

Difficulty 3/5 1-2 days Newbie friendliness 48/100

vmware/pinniped#1025 · Opened Feb 18, 2022
Pinniped Supervisor - interactively authenticate once per day/week/month Open

enhancement priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 45/100

vmware/pinniped#1004 · 6 comments · Opened Feb 14, 2022
Turn CNCF Webinar into a tutorial in Pinniped docs Open

enhancement priority/undecided

Difficulty 3/5 1-2 days Newbie friendliness 38/100

vmware/pinniped#1000 · 1 comment · Opened Feb 11, 2022
Safari users shouldn't need to always copy/paste the authcode on web-based login flows Open

enhancement priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 38/100

vmware/pinniped#998 · 5 comments · Opened Feb 10, 2022
Publish Pinniped CLI to Krew Open

enhancement priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 42/100

vmware/pinniped#990 · 2 comments · Opened Feb 9, 2022
Disallow usernames or group names that have "system:" as group name Open

enhancement priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#983 · 4 comments · Opened Feb 4, 2022
Support a SAML Indentity Provider Open

enhancement priority/undecided

Difficulty 5/5 Over a week Newbie friendliness 25/100

vmware/pinniped#974 · 3 reactions · Opened Jan 25, 2022
Warnings on the CLI should have a newline in front of them Open

bug priority/undecided

Difficulty 2/5 1-3 hours Newbie friendliness 58/100

vmware/pinniped#971 · Opened Jan 21, 2022
Consider caching which client auth strategy is accepted by the upstream OIDC revocation endpoint Open

enhancement priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 45/100

vmware/pinniped#947 · Opened Jan 14, 2022
Do fewer ID token validations on the CLI ~~, and require HTTPS OIDC issuers in the CLI~~ Open

enhancement estimate/L priority/undecided

Difficulty 4/5 3-5 days Newbie friendliness 42/100

vmware/pinniped#941 · Opened Jan 10, 2022
[stub] document configuring KeyCloak as OIDC IDP with Pinniped Open

documentation enhancement good first issue priority/backlog

Difficulty 4/5 3-5 days Newbie friendliness 35/100

vmware/pinniped#926 · 4 reactions · Opened Dec 17, 2021
Add impersonation proxy integration test for kubectl proxy Open

enhancement good first issue priority/undecided

Difficulty 3/5 1-2 days Newbie friendliness 48/100

vmware/pinniped#915 · Opened Dec 14, 2021
Make it easier to configure my IDP by having something better than a log statement to tell me what my upstream IDP said about me Open

enhancement priority/undecided

Difficulty 5/5 Over a week Newbie friendliness 25/100

vmware/pinniped#910 · 1 comment · Opened Dec 10, 2021
[stub] make defensive changes to pinniped CLI to handle clock skew Open

enhancement priority/undecided

Difficulty 5/5 Over a week Newbie friendliness 25/100

vmware/pinniped#902 · Opened Dec 1, 2021

vmware/pinniped

Get new issues in your inbox