Issues

• story: query fields and semantic search

  stakeholder/portal
  Feature

  platform-mesh/backlog#424 · Filter by author FWuermse opened on Oct 2, 2026

• ADR 015 - Installation UX

  ADR

  platform-mesh/backlog#423 · Filter by author akafazov opened on Oct 2, 2026
  

• story: Platform Mesh website review

  platform-mesh/backlog#422 · Filter by author mengliwg opened on Oct 1, 2026
  

• spike: Evaluate reconciling kcp event subscriptions into Knative Eventing

  platform-mesh/backlog#421 · Filter by author hellsontime opened on Oct 1, 2026
  

• Bug: platform-mesh.io local-setup <version-tag> doesn't show tag value for 0.4

  Bug

  platform-mesh/backlog#420 · Filter by author mengliwg opened on Oct 1, 2026

• story: Deploy and back up Keycloak only when Managed mode is actually selected

  platform-mesh/backlog#419 · Filter by author Palando opened on Sep 29, 2026

• story: User management and invites degrade visibly, not silently, when no user directory is available

  platform-mesh/backlog#418 · Filter by author Palando opened on Sep 29, 2026

• story: A tenant editing its own authentication configuration cannot lock itself out

  platform-mesh/backlog#417 · Filter by author Palando opened on Sep 29, 2026

• story: Every organization gets an unambiguous identity prefix, without a cross-workspace uniqueness check

  platform-mesh/backlog#416 · Filter by author Palando opened on Sep 29, 2026

• task: Deprecate IdentityProviderConfiguration out of core.platform-mesh.io; gate Invite to Managed mode

  platform-mesh/backlog#415 · Filter by author Palando opened on Sep 29, 2026

• task: Prefix migration — move every principal from unprefixed to <organization-name>:-prefixed identity

  platform-mesh/backlog#414 · Filter by author Palando opened on Sep 29, 2026

• story: Run Platform Mesh authentication against an existing IdP that Platform Mesh never writes to

  platform-mesh/backlog#413 · Filter by author Palando opened on Sep 29, 2026

• task: Extract Keycloak provisioning into keycloak-authn-operator

  platform-mesh/backlog#412 · Filter by author Palando opened on Sep 29, 2026

• task: Introduce authentication.platform-mesh.io/v1alpha1 and derive AuthenticationConfig from today's implicit configuration

  platform-mesh/backlog#411 · Filter by author Palando opened on Sep 29, 2026

• task: Amend ADR 008 — reject restores whose authorization engine or authentication provisioning mode does not match the target composition

  platform-mesh/backlog#410 · Filter by author Palando opened on Sep 29, 2026

• task: Verify least-privilege access and RBAC escalation behaviour for kcp permission claims across workspace boundaries

  platform-mesh/backlog#409 · Filter by author Palando opened on Sep 29, 2026

• task: Coordinate ProviderPermissions (RFC 010) to generate RoleDefinitions instead of carrying OpenFGA DSL — before RFC 010 merges

  platform-mesh/backlog#408 · Filter by author Palando opened on Sep 29, 2026

• task: Projector conformance test suite — one fixture set, asserted against both engines

  platform-mesh/backlog#407 · Filter by author Palando opened on Sep 29, 2026

• story: Deploy, observe, and back up OpenFGA only when it is actually selected

  platform-mesh/backlog#406 · Filter by author Palando opened on Sep 29, 2026

• task: CI lint gate — golang-commons/fga must not be on the import path of components that run without the module

  platform-mesh/backlog#405 · Filter by author Palando opened on Sep 29, 2026

• story: Search never returns unfiltered, cross-workspace results when no authorization engine can filter them

  platform-mesh/backlog#404 · Filter by author Palando opened on Sep 29, 2026

• task: Design the RBAC projection of APIExportPolicy's bind semantics

  platform-mesh/backlog#403 · Filter by author Palando opened on Sep 29, 2026

• story: Assign roles through a declarative resource instead of a direct tuple write

  platform-mesh/backlog#402 · Filter by author Palando opened on Sep 29, 2026

• story: Run Platform Mesh's authorization on Kubernetes RBAC instead of OpenFGA

  platform-mesh/backlog#401 · Filter by author Palando opened on Sep 29, 2026

• task: Design the RBAC projection of APIExportPolicy's bind semantics

  platform-mesh/backlog#400 · Filter by author Palando opened on Sep 29, 2026