Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
80 commits
Select commit Hold shift + click to select a range
937760b
chore: Add github issue templates
spbsoluble Feb 18, 2026
24a5eba
chore(ci): Update dependabot.yml settings
spbsoluble Feb 18, 2026
11d0029
chore(ci): Add auto labeling for PRs
spbsoluble Feb 18, 2026
6652e5c
chore(ci): Add security workflows.
spbsoluble Feb 18, 2026
62856e3
Update generated docs
Feb 18, 2026
8b2efe5
chore(docs): Update CHANGELOG.md
spbsoluble Feb 18, 2026
151c028
feat(crypto): add BouncyCastle certificate utilities foundation
spbsoluble Feb 18, 2026
57c9f68
feat(crypto): refactor KubeClient PKCS12 operations to BouncyCastle.
spbsoluble Feb 18, 2026
b9136ad
feat(crypto): refactor JobBase to use BouncyCastle
spbsoluble Feb 18, 2026
8eb129b
feat(crypto): refactor Inventory.cs to use BouncyCastle
spbsoluble Feb 18, 2026
a6889db
feat(logging): implement comprehensive trace-level logging with sensi…
spbsoluble Feb 19, 2026
71681ff
chore(tests): Full integration tests for each store-type
spbsoluble Feb 20, 2026
4318e9a
fix(tests): Fix failing DSA key tests
spbsoluble Feb 20, 2026
f55c104
fix(client): Fix nullreference issues around kubeconfig parsing
spbsoluble Feb 20, 2026
5d9e3f4
fix(inventory): Initialize logger before everything else
spbsoluble Feb 20, 2026
effd26a
fix(base): Add verbose logging
spbsoluble Feb 20, 2026
fa81d32
fix(management): Fix alias parsing for `k8sns` and `k8scluster` store…
spbsoluble Feb 20, 2026
b257abd
chore(util): Add verbose logging to PAM resolver.
spbsoluble Feb 20, 2026
48d64e3
chore(docs): Update docs.
spbsoluble Feb 20, 2026
07115c9
chore(ci): Run tests on PRs
spbsoluble Feb 20, 2026
0aebca3
Update generated docs
Feb 20, 2026
3665fe9
fix(ci): Source from keyfactor public nuget for keyfactor packages.
spbsoluble Feb 20, 2026
42f91ea
Update generated docs
Feb 20, 2026
3391440
chore(ci): Add nuget config for scanning
spbsoluble Feb 20, 2026
d046a9d
Update generated docs
Feb 20, 2026
ef2ed9e
fix(ci): Fix unit tests to run on .net8 and .net10
spbsoluble Feb 20, 2026
b622382
Update generated docs
Feb 20, 2026
185491b
fix(ci): Update integration-tests.yml
spbsoluble Feb 20, 2026
0d35c14
Update generated docs
Feb 20, 2026
af52c54
fix(ci): add missing kind config file
spbsoluble Feb 20, 2026
b3d7d22
Update generated docs
Feb 20, 2026
a4c58be
fix(ci): fix code-quality and unit-tests workflows
spbsoluble Feb 20, 2026
6a773aa
Update generated docs
Feb 20, 2026
d7443c7
fix(sln): Add test project to solution
spbsoluble Feb 20, 2026
b2e1de9
fix(ci): fix kind config
spbsoluble Feb 20, 2026
2a591a7
Update generated docs
Feb 20, 2026
bab52a8
fix(ci): fix kind config
spbsoluble Feb 20, 2026
1dfa190
Update generated docs
Feb 20, 2026
4322f1a
fix(ci): Resolve conflict w/ bootstrap workflow
spbsoluble Feb 20, 2026
8753459
Update generated docs
Feb 20, 2026
80156cd
fix(ci): Resolve conflict w/ bootstrap workflow
spbsoluble Feb 20, 2026
e65b034
Update generated docs
Feb 20, 2026
1913ccb
chore: Fix linting issues
spbsoluble Feb 21, 2026
4af7c0e
Update generated docs
Feb 21, 2026
5013926
chore(docs): Add verbose docs and missing logging.
spbsoluble Feb 22, 2026
78be889
Update generated docs
Feb 22, 2026
3f01c9f
fix(client): Handle ED keys
spbsoluble Feb 23, 2026
7f26483
fix(inventory): Call `HandleOpaqueSecretAsList` for Opaque secrets
spbsoluble Feb 23, 2026
dfd8cfc
chore(tests): add tests for each key type and size for all store-types
spbsoluble Feb 23, 2026
97bed08
Update generated docs
Feb 23, 2026
6b75db3
chore(tests): Refactor tests for efficiency
spbsoluble Feb 24, 2026
d696675
chore(ci): Update test outputs.
spbsoluble Feb 24, 2026
0ab9baa
Update generated docs
Feb 24, 2026
bc90867
fix(client): Preserve private key format on management jobs if present.
spbsoluble Feb 24, 2026
690a480
fix(jobs/management): Reject requests that deploy only a certificate …
spbsoluble Feb 25, 2026
92244b2
Update generated docs
Feb 25, 2026
b52f4c5
Merge pull request #65 from Keyfactor/feat/experimental-der-pem-detec…
spbsoluble Feb 25, 2026
d61500c
Update generated docs
Feb 25, 2026
e95da30
feat(store-types/k8scert): Allow `K8SCert` to inventory one or all si…
spbsoluble Feb 25, 2026
3b9bac4
Update generated docs
Feb 25, 2026
531c119
fix(store-types): `K8SNS` and `K8SCluster` store types respect `KubeN…
spbsoluble Feb 25, 2026
15ccc6d
Update generated docs
Feb 25, 2026
d4c9399
chore(tests): add tests related to storepath vs kubesecretname primacy.
spbsoluble Feb 26, 2026
6ae3706
Merge remote-tracking branch 'origin/feat/x509certificate2_removal' i…
spbsoluble Feb 26, 2026
6158350
Update generated docs
Feb 26, 2026
d579de0
chore(tests): optimize cluster tests
spbsoluble Feb 26, 2026
1e70734
fix(store-types/k8scert): Handle null `KubeSecretType`
spbsoluble Feb 26, 2026
4915583
chore(refactor): Use Keyfactor.PKI package functions for cert utils.
spbsoluble Feb 26, 2026
ce22c76
chore(docs): update docs
spbsoluble Feb 26, 2026
35358a4
Update generated docs
Feb 26, 2026
71740e6
chore(tests): add tests for `IncludeCertChain=false`
spbsoluble Feb 26, 2026
c0b3323
fix(store-types/k8spkcs12): `IncludeCertChain` flag is now respected.
spbsoluble Feb 26, 2026
f742d6e
Update generated docs
Feb 26, 2026
a9eedbc
chore(tests): Add tests for `IncludeCertChain=false`
spbsoluble Feb 27, 2026
4a6c078
Update generated docs
Feb 27, 2026
9106703
chore(tests): Warn on `IncludeCertChain=false` and `SeparateChain=true`
spbsoluble Feb 27, 2026
1065c82
chore(docs): Update CHANGELOG.md
spbsoluble Feb 27, 2026
1900093
Update generated docs
Feb 27, 2026
84e9b23
fix(storetypes): Handle `create if missing` use case, where command s…
spbsoluble Feb 27, 2026
60e05a0
Update generated docs
Feb 27, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
193 changes: 193 additions & 0 deletions .github/ISSUE_TEMPLATE/bug_report.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,193 @@
name: 🐛 Bug Report
description: Report a bug or unexpected behavior in the Kubernetes Orchestrator Extension
title: "[Bug]: "
labels: ["bug", "needs-triage"]
body:
- type: markdown
attributes:
value: |
Thanks for taking the time to report this bug! Please fill out the information below to help us resolve the issue.

- type: textarea
id: description
attributes:
label: Bug Description
description: A clear and concise description of what the bug is.
placeholder: When I try to..., I expect... but instead...
validations:
required: true

- type: dropdown
id: store-type
attributes:
label: Affected Store Type
description: Which Kubernetes store type is affected?
options:
- K8SCluster
- K8SNS
- K8SJKS
- K8SPKCS12
- K8SSecret
- K8STLSSecr
- K8SCert
- Multiple store types
- Not sure / Not applicable
validations:
required: true

- type: dropdown
id: operation
attributes:
label: Affected Operation
description: Which orchestrator operation is affected?
options:
- Inventory
- Management (Add)
- Management (Remove)
- Discovery
- Reenrollment
- Store Creation
- Multiple operations
- Not sure / Not applicable
validations:
required: true

- type: textarea
id: steps-to-reproduce
attributes:
label: Steps to Reproduce
description: Detailed steps to reproduce the behavior
placeholder: |
1. Configure store with...
2. Run operation...
3. See error...
validations:
required: true

- type: textarea
id: expected-behavior
attributes:
label: Expected Behavior
description: What did you expect to happen?
placeholder: The certificate should be added to the secret...
validations:
required: true

- type: textarea
id: actual-behavior
attributes:
label: Actual Behavior
description: What actually happened?
placeholder: Instead, I received error...
validations:
required: true

- type: input
id: orchestrator-version
attributes:
label: Orchestrator Extension Version
description: Version of the Kubernetes Orchestrator Extension
placeholder: e.g., 1.2.2
validations:
required: true

- type: input
id: command-version
attributes:
label: Keyfactor Command Version
description: Version of Keyfactor Command
placeholder: e.g., 12.4, 24.4
validations:
required: true

- type: dropdown
id: kubernetes-distro
attributes:
label: Kubernetes Distribution
description: Which Kubernetes distribution are you using?
options:
- Azure Kubernetes Service (AKS)
- Amazon Elastic Kubernetes Service (EKS)
- Google Kubernetes Engine (GKE)
- Red Hat OpenShift
- Rancher
- K3s
- Vanilla Kubernetes
- Other (please specify in Additional Context)
validations:
required: true

- type: input
id: kubernetes-version
attributes:
label: Kubernetes Version
description: Version of Kubernetes
placeholder: e.g., 1.28, 1.29
validations:
required: true

- type: dropdown
id: orchestrator-platform
attributes:
label: Orchestrator Platform
description: Where is the Universal Orchestrator running?
options:
- Windows
- Linux
- Container
- Not sure
validations:
required: true

- type: textarea
id: logs
attributes:
label: Relevant Log Output
description: |
Please copy and paste any relevant log output. This will be automatically formatted.
**Important**: Redact any sensitive information (passwords, tokens, server names).
render: shell
placeholder: |
[Error] Failed to add certificate to secret...
[Debug] Connecting to Kubernetes API at...

- type: textarea
id: store-configuration
attributes:
label: Store Configuration
description: |
If relevant, provide your store configuration (redact sensitive information).
Include custom properties, store path pattern, etc.
render: json
placeholder: |
{
"StorePath": "my-namespace",
"Properties": {
"SeparateChain": "true",
"IncludeCertChain": "false"
}
}

- type: textarea
id: additional-context
attributes:
label: Additional Context
description: |
Add any other context about the problem here.
- Screenshots
- Network configuration
- Service account permissions
- Related issues

- type: checkboxes
id: checklist
attributes:
label: Pre-submission Checklist
description: Please confirm the following before submitting
options:
- label: I have searched existing issues to ensure this is not a duplicate
required: true
- label: I have redacted all sensitive information from logs and configurations
required: true
- label: I have provided all required version information
required: true
17 changes: 17 additions & 0 deletions .github/ISSUE_TEMPLATE/config.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
blank_issues_enabled: false
contact_links:
- name: 🔐 GitHub Security Advisory (Private Vulnerability Reporting)
url: https://github.com/Keyfactor/k8s-orchestrator/security/advisories/new
about: Report critical security vulnerabilities privately through GitHub Security Advisories (recommended for security issues)

- name: 📞 Keyfactor Support Portal
url: https://support.keyfactor.com
about: For Keyfactor Command support, licensing questions, or enterprise support

- name: 💬 Community Discussions
url: https://github.com/Keyfactor/k8s-orchestrator/discussions
about: Ask questions, share ideas, and discuss with the community

- name: 📖 Documentation
url: https://github.com/Keyfactor/k8s-orchestrator/blob/main/README.md
about: Read the complete documentation including installation guides and store type references
119 changes: 119 additions & 0 deletions .github/ISSUE_TEMPLATE/documentation.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,119 @@
name: 📚 Documentation or Question
description: Report a documentation issue or ask a question about the Kubernetes Orchestrator Extension
title: "[Docs]: "
labels: ["documentation", "question"]
body:
- type: markdown
attributes:
value: |
Thanks for helping improve our documentation or asking a question!

**Note**: For general Keyfactor Command support, please contact Keyfactor Support at https://support.keyfactor.com

- type: dropdown
id: issue-type
attributes:
label: Issue Type
description: What type of issue is this?
options:
- Documentation Error / Typo
- Missing Documentation
- Unclear Documentation
- Documentation Improvement Suggestion
- General Question / Support Request
- How-to / Best Practices Question
validations:
required: true

- type: textarea
id: description
attributes:
label: Description
description: Describe the documentation issue or ask your question
placeholder: |
The documentation says... but I'm confused about...
OR
How do I configure...
validations:
required: true

- type: input
id: documentation-link
attributes:
label: Documentation Link
description: If reporting a documentation issue, provide a link to the relevant documentation
placeholder: https://github.com/Keyfactor/k8s-orchestrator/blob/main/README.md#...

- type: dropdown
id: topic-area
attributes:
label: Topic Area
description: Which area does this relate to?
options:
- Installation / Setup
- Store Type Configuration
- Service Account / Authentication
- Certificate Operations (Add/Remove/Inventory)
- Discovery Configuration
- Store Types (K8SCluster, K8SNS, etc.)
- Custom Properties / Parameters
- Troubleshooting
- Integration with Keyfactor Command
- Best Practices
- API / Development
- Other

- type: textarea
id: current-understanding
attributes:
label: Current Understanding / What You've Tried
description: |
For questions: What have you tried so far?
For doc issues: What does the current documentation say?
placeholder: |
I've read the documentation at...
I've tried...
I expected the documentation to explain...

- type: textarea
id: expected-information
attributes:
label: Expected Information / Desired Outcome
description: |
For doc issues: What should the documentation say instead?
For questions: What are you trying to accomplish?
placeholder: |
The documentation should explain...
OR
I'm trying to accomplish...

- type: textarea
id: environment-info
attributes:
label: Environment Information (if applicable)
description: |
If your question relates to a specific setup, provide version information
placeholder: |
Orchestrator Extension Version: 1.2.2
Keyfactor Command Version: 24.4
Kubernetes Distribution: AKS
Store Type: K8SCluster

- type: textarea
id: additional-context
attributes:
label: Additional Context
description: |
Any additional context, screenshots, configuration examples, or links that might help.

- type: checkboxes
id: checklist
attributes:
label: Pre-submission Checklist
options:
- label: I have searched existing issues and documentation
required: true
- label: I have checked the README and store type documentation
required: false
- label: For Keyfactor Command questions, I understand I should contact Keyfactor Support
required: false
Loading
Loading