Issues

• The HyperDX auth seam's token round trip always skips

  post-ga
  hyperi-io/dfe-infra#550 · Filter by author catinspace-au opened on Oct 6, 2026

• The engine can't describe the topics it manages on Strimzi, so drift is never seen

  post-ga
  hyperi-io/dfe-infra#548 · Filter by author catinspace-au opened on Oct 6, 2026

• Find an opt-in alternative to FerretDB

  post-ga
  hyperi-io/dfe-infra#533 · Filter by author catinspace-au opened on Oct 6, 2026

• Move ClickHouse to the newest LTS line after GA

  post-ga
  hyperi-io/dfe-infra#532 · Filter by author catinspace-au opened on Oct 6, 2026

• Run FerretDB's PostgreSQL backend on CNPG for HA on the scale profile

  post-ga
  hyperi-io/dfe-infra#528 · Filter by author catinspace-au opened on Oct 5, 2026

• dfe-ops upgrade stages do not order the rollout

  post-ga
  hyperi-io/dfe-infra#508 · Filter by author catinspace-au opened on Oct 2, 2026
  2

• Post-GA: pin the cluster-mode Redpanda images by digest

  post-ga
  hyperi-io/dfe-infra#500 · Filter by author catinspace-au opened on Oct 1, 2026

• Set APP_ENV from the deployment mode so scalo's production checks run (2.2.1)

  post-ga
  hyperi-io/dfe-infra#487 · Filter by author catinspace-au opened on Sep 30, 2026

• TLS on the console-to-engine login hop and the HyperDX JWKS fetch

  post-ga
  hyperi-io/dfe-infra#484 · Filter by author catinspace-au opened on Sep 30, 2026

• put Kafka on SASL_SSL on every k8s tier

  post-ga
  hyperi-io/dfe-infra#483 · Filter by author catinspace-au opened on Sep 30, 2026

• ClickHouse Keeper TLS (port 2281)

  post-ga
  hyperi-io/dfe-infra#482 · Filter by author catinspace-au opened on Sep 30, 2026

• close ClickHouse's plaintext ports (8123/9000) on k8s

  post-ga
  hyperi-io/dfe-infra#481 · Filter by author catinspace-au opened on Sep 30, 2026

• move the OTel collector's ClickHouse connection to TLS (native 9440)

  post-ga
  hyperi-io/dfe-infra#480 · Filter by author catinspace-au opened on Sep 30, 2026

• hoist the clickhouse tls rule into dfe-common after ga

  post-ga
  hyperi-io/dfe-infra#479 · Filter by author catinspace-au opened on Sep 30, 2026

• FerretDB and DocumentDB chatter into otel_logs, and pg_cron history grows without bound

  post-ga
  hyperi-io/dfe-infra#463 · Filter by author catinspace-au opened on Sep 29, 2026

• Generate the ArgoCD admin policy from adminGroups

  post-ga
  hyperi-io/dfe-infra#452 · Filter by author catinspace-au opened on Sep 29, 2026

• fix(kafbat): admins by default, and read-only topic access for data analysts

  post-ga
  hyperi-io/dfe-infra#447 · Filter by author catinspace-au opened on Sep 28, 2026
  1

• fix(kafka): a managed-Kafka deploy gets no Kafka credential into the app namespace

  post-ga
  hyperi-io/dfe-infra#446 · Filter by author catinspace-au opened on Sep 28, 2026
  1

• fix(bootstrap): upgrades never reach the components bootstrap installed

  post-ga
  hyperi-io/dfe-infra#428 · Filter by author catinspace-au opened on Sep 28, 2026

• TESTING-CYCLE.md and deployment/aws.md are over the doc length ceiling

  post-ga
  hyperi-io/dfe-infra#412 · Filter by author catinspace-au opened on Sep 27, 2026

• The acceptance drivers need four private checkouts, so an outsider cannot run them

  blocked
  hyperi-io/dfe-infra#409 · Filter by author catinspace-au opened on Sep 27, 2026
  1

  

• The source runner routes on a _source tag we invent, not data_stream.dataset

  post-ga
  hyperi-io/dfe-infra#408 · Filter by author catinspace-au opened on Sep 27, 2026

• Bare-cluster bootstrap: two ordering faults and an over-broad single-tier guard

  post-ga
  hyperi-io/dfe-infra#376 · Filter by author catinspace-au opened on Sep 24, 2026
  1

• A deployment that goes Degraded after a sync tells nobody

  post-ga
  hyperi-io/dfe-infra#366 · Filter by author catinspace-au opened on Sep 18, 2026

• fix: three charts hard-code ghcr.io/hyperi-io, so a mirrored registry is ignored

  post-ga
  hyperi-io/dfe-infra#365 · Filter by author catinspace-au opened on Sep 18, 2026
  1