projectcapsule / capsule-proxy

Reverse proxy for Capsule Operator.

https://github.com/projectcapsule/capsule

projectcapsule/capsule-proxy Issues

feat: option to skip impersonation review for proxy environments (teleport)
Closed a month ago3
InternalError while describing created namespace under a tenant
Closed a month ago6
can list all pod in all namespace under a tenant?
Updated a month ago15
0.5.0 fails to build docker image
Closed 3 months ago1
serviceaccount impersonation fails
Closed 3 months ago13
Kubernetes Dashboard crashing on startup with capsule-proxy
Closed 3 months ago14
Missing support for extraArgs in Helm Chart
Closed 3 months ago
feat: bump components Golang 1.21
Closed 3 months ago1
Using Cert manager to generate certificates fails
Closed 3 months ago4
HELM: allow cert job generator to use tolerations and affinity
Closed 3 months ago
user/serviceaccount/groups impersonation fails
Closed 6 months ago4
Allow user to gets list of his tenants
Closed 4 months ago7
Add a feature flag for reverse proxy metrics collection
Closed 4 months ago3
Question: Any plan to replace gorilla/mux with any other framework?
Closed 5 months ago12
Refactoring e2e test suite in Ginkgo
Updated 6 months ago3
Allow adding arbitrary SANs for x509 cert-manager certificates
Closed 6 months ago
Incorrect impersonation handling
Closed 6 months ago
Chart update - HPA to autoscaling/v2 as autoscaling/v2beta1 is deprecated
Closed 7 months ago1
capsule proxy with kube oidc proxy
Closed 8 months ago6
Cannot impersonate user with active_directory group from rancher
Closed 8 months ago
k8sControlPlaneUrl declared in values but not passed to application
Closed 8 months ago1
Unable to proxy resources for users, who are owners of multiple tenants
Closed a year ago
missing start up arguments error handling
Closed a year ago
"failed to verify certificate: x509: certificate signed by unknown authority" on k3s installation
Closed a year ago2
Tenant owner can list the namespace not managed by Capsule
Closed a year ago5
error: got secret, but it did not contain a 'ca' key
Closed a year ago3
"runtime error" for every request when enable-ssl = false & auth preferred type contains TLSCertificate
Closed a year ago
Allow to specify an already existing secret for the TLS Secret volume
Closed a year ago
Allow adding arbitrary SANs for x509 certificates
Closed a year ago
--auth-preferred-types flag can be set multiple times, just first option is evaluated
Closed a year ago
Capsule Proxy claims resource it's created, but it's not available right away
Closed a year ago15
don't validate client cert if TLSCertificate is not active
Closed a year ago3
Evaluating switching to Capsule ProxySetting rather than using RoleBindingReflector
Updated a year ago1
Support for RuntimeClasses
Closed a year ago1
Align with capsule v0.2.0 release
Closed a year ago
Certificate valid only for ingress host names with cert-manager
Closed a year ago1
Error when using with Rancher
Closed a year ago1
Handle Multiple Authentication Types
Closed a year ago9
'unauthorized: forbidden access' error when deploying Capsule-Proxy on OpenShift
Closed a year ago
Group Impersenation Handling
Closed a year ago
unable to list nodes as a tenant owner
Closed a year ago2
Job kind immutability breaks gitops. capsule-proxy-certgen job must support ttlSecondsAfterFinished as a helm chart value
Closed a year ago1
feat: default pod security standards
Closed a year ago
User or group with LIST permission is able to create object
Closed a year ago
Creation of Namespaces using the proxy is broken
Closed a year ago
incorrect handling of trailing slashes in LIST requests
Closed a year ago
Capsule proxy support for oidc roles->group mapping configuration of api-server is missing
Closed 2 years ago1
Unable to consume JWTs from service principal due to missing required claim attribute
Closed 2 years ago
Help on setting up capsule-proxy on AKS w/ Traefik as ingress
Closed 2 years ago12
Exec/port-forward/logs command not working with capsule-proxy
Closed 2 years ago