Issues

• Post-GA: pin the cluster-mode Redpanda images by digest

  hyperi-io/dfe-infra#500 · Filter by author catinspace-au opened on Oct 1, 2026

• Set APP_ENV from the deployment mode so scalo's production checks run (2.2.1)

  hyperi-io/dfe-infra#487 · Filter by author catinspace-au opened on Sep 30, 2026

• no DFE chart sets APP_ENV, so scalo's Kafka production gate is inert

  hyperi-io/dfe-infra#485 · Filter by author catinspace-au opened on Sep 30, 2026

• TLS on the console-to-engine login hop and the HyperDX JWKS fetch

  hyperi-io/dfe-infra#484 · Filter by author catinspace-au opened on Sep 30, 2026

• put Kafka on SASL_SSL on every k8s tier

  hyperi-io/dfe-infra#483 · Filter by author catinspace-au opened on Sep 30, 2026

• ClickHouse Keeper TLS (port 2281)

  hyperi-io/dfe-infra#482 · Filter by author catinspace-au opened on Sep 30, 2026

• close ClickHouse's plaintext ports (8123/9000) on k8s

  hyperi-io/dfe-infra#481 · Filter by author catinspace-au opened on Sep 30, 2026

• move the OTel collector's ClickHouse connection to TLS (native 9440)

  hyperi-io/dfe-infra#480 · Filter by author catinspace-au opened on Sep 30, 2026

• hoist the clickhouse tls rule into dfe-common after ga

  hyperi-io/dfe-infra#479 · Filter by author catinspace-au opened on Sep 30, 2026

• FerretDB and DocumentDB chatter into otel_logs, and pg_cron history grows without bound

  hyperi-io/dfe-infra#463 · Filter by author catinspace-au opened on Sep 29, 2026

• Generate the ArgoCD admin policy from adminGroups

  hyperi-io/dfe-infra#452 · Filter by author catinspace-au opened on Sep 29, 2026

• fix(kafbat): admins by default, and read-only topic access for data analysts

  hyperi-io/dfe-infra#447 · Filter by author catinspace-au opened on Sep 28, 2026
  1

• fix(kafka): a managed-Kafka deploy gets no Kafka credential into the app namespace

  hyperi-io/dfe-infra#446 · Filter by author catinspace-au opened on Sep 28, 2026

• fix(bootstrap): upgrades never reach the components bootstrap installed

  hyperi-io/dfe-infra#428 · Filter by author catinspace-au opened on Sep 28, 2026

• TESTING-CYCLE.md and deployment/aws.md are over the doc length ceiling

  hyperi-io/dfe-infra#412 · Filter by author catinspace-au opened on Sep 27, 2026

• Code-scanning alert 14 is a false positive, so mark it at the line

  hyperi-io/dfe-infra#411 · Filter by author catinspace-au opened on Sep 27, 2026

• The acceptance drivers need four private checkouts, so an outsider cannot run them

  hyperi-io/dfe-infra#409 · Filter by author catinspace-au opened on Sep 27, 2026

• The source runner routes on a _source tag we invent, not data_stream.dataset

  hyperi-io/dfe-infra#408 · Filter by author catinspace-au opened on Sep 27, 2026

• Bare-cluster bootstrap: two ordering faults and an over-broad single-tier guard

  hyperi-io/dfe-infra#376 · Filter by author catinspace-au opened on Sep 24, 2026
  1

• suite.yaml has a dead dfe-schemas -> dfe-deploy edge, with a note that now says the opposite

  hyperi-io/dfe-infra#370 · Filter by author catinspace-au opened on Sep 19, 2026

• A deployment that goes Degraded after a sync tells nobody

  rc14
  hyperi-io/dfe-infra#366 · Filter by author catinspace-au opened on Sep 18, 2026

• fix: three charts hard-code ghcr.io/hyperi-io, so a mirrored registry is ignored

  hyperi-io/dfe-infra#365 · Filter by author catinspace-au opened on Sep 18, 2026
  1

• Retargeting an rc.13 deployment at rc.14 moves Kafka to 4.3.1 while the operator stays on 0.51

  rc14
  hyperi-io/dfe-infra#364 · Filter by author catinspace-au opened on Sep 18, 2026
  1

• A deployment cannot tell a value that is not written yet from one that will never arrive

  rc14
  hyperi-io/dfe-infra#360 · Filter by author catinspace-au opened on Sep 18, 2026
  1

• governance actions vs chart values has never run on a PR, and the run is green anyway

  rc14
  hyperi-io/dfe-infra#358 · Filter by author catinspace-au opened on Sep 17, 2026