Repository navigation

Issues

New issue

Support a standard vocabulary for dataset classification in the open-data-provider contract
#845 · RonaldHensbergen opened on Oct 7, 2026
Design hybrid mode-based + per-component override strategy for env-specific defaults (images, security, health checks)
#382 · RonaldHensbergen opened on Aug 6, 2026
Make shared DB event persistence truly backend-portable
#167 · RonaldHensbergen opened on Jul 14, 2026

Define a workload-identity contract for attested service identity
RonaldHensbergen/composable-data-stack#1068 · opened on Oct 31, 2026
Contract port semantics: provided-contract port is the host-published port, but in-network consumers use it against the container port
RonaldHensbergen/composable-data-stack#1067 · opened on Oct 31, 2026 · Dutch Public-Sector Data & Security Alignment
Pinned vector/loki images fail exec under no-new-privileges; track upstream so the loki module can re-enable security_opt
RonaldHensbergen/composable-data-stack#1066 · opened on Oct 31, 2026 · Dutch Public-Sector Data & Security Alignment
Docker smoke-test CI does not cover experimental modules (e.g. loki, otel-collector)
RonaldHensbergen/composable-data-stack#1065 · opened on Oct 31, 2026 · Dutch Public-Sector Data & Security Alignment
Superset: consume the oidc-provider contract for OIDC login (after #681)
RonaldHensbergen/composable-data-stack#1055 · opened on Oct 31, 2026 · Dutch Public-Sector Data & Security Alignment
tests: test_advertised_host_without_rendered_service_reports_e147 asserts E150 (misleading name)
RonaldHensbergen/composable-data-stack#1050 · opened on Oct 31, 2026
marquez module: host-published api/admin ports map to container port 5000/5001 while the process listens on config.apiPort/apiAdminPort
RonaldHensbergen/composable-data-stack#1049 · opened on Oct 31, 2026
[vuln-scan] HIGH/CRITICAL findings in cds-superset
RonaldHensbergen/composable-data-stack#1043 · opened on Oct 31, 2026
Deduplicate the Kubernetes workload substitution used for network policy surfaces
RonaldHensbergen/composable-data-stack#1034 · opened on Oct 30, 2026 · Production ready
Derive reverse-proxy route targets as NetworkPolicy edges
RonaldHensbergen/composable-data-stack#1033 · opened on Oct 30, 2026 · Production ready
Document or configure the cluster DNS selector used by generated NetworkPolicies
RonaldHensbergen/composable-data-stack#1032 · opened on Oct 30, 2026 · Production ready
Validate k8s wait-gates against the default-deny NetworkPolicy baseline
RonaldHensbergen/composable-data-stack#1031 · opened on Oct 30, 2026 · Production ready
Record unscoped custom ingress allow rules in the Kubernetes security scan
RonaldHensbergen/composable-data-stack#1030 · opened on Oct 30, 2026 · Production ready
Add a prune command to remove stale stack images
RonaldHensbergen/composable-data-stack#1026 · opened on Oct 29, 2026
Declare external egress for helm-target workloads under generated default-deny NetworkPolicies
RonaldHensbergen/composable-data-stack#1023 · opened on Oct 29, 2026 · Production ready
CI follow-ups: exercise the psycopg3 spelling end to end and pin the pre-existing build/twine/pipx install
RonaldHensbergen/composable-data-stack#1008 · opened on Oct 28, 2026
team profile prod overlay: remove direct host publishes for admin backends (CDS-SEC-074)
RonaldHensbergen/composable-data-stack#981 · opened on Oct 26, 2026 · Production ready
Promote Airflow orchestration module out of modules-experimental/ to production-suitable
RonaldHensbergen/composable-data-stack#977 · opened on Oct 26, 2026
Promote Marquez observability module out of modules-experimental/ to production-suitable
RonaldHensbergen/composable-data-stack#976 · opened on Oct 26, 2026
Promote dlt ingestion module out of modules-experimental/ to production-suitable
RonaldHensbergen/composable-data-stack#975 · opened on Oct 26, 2026
Flip keycloak's webServer.mode default to production together with productionSuitable: true (E140 absent-mode gap)
RonaldHensbergen/composable-data-stack#974 · opened on Oct 26, 2026 · Production ready
Apply the production/learning tag to the remaining production-ready modules
RonaldHensbergen/composable-data-stack#959 · opened on Oct 25, 2026 · Dutch Public-Sector Data & Security Alignment
Guard against post-release CHANGELOG entries landing in released sections
RonaldHensbergen/composable-data-stack#945 · opened on Oct 25, 2026
security-rules.md: Reporting section predates the newer complianceCategory-tagged rules
RonaldHensbergen/composable-data-stack#944 · opened on Oct 25, 2026
Shared contract documents missing for five contract kinds in use
RonaldHensbergen/composable-data-stack#942 · opened on Oct 25, 2026