Agent-level Secret references injected as run env (CRD-only, no UI)
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 58/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Quiet
- Tech stack
- go, kubernetes
- Domain
- infrastructure
Research direction
Start by tracing the Agent CRD reference through the controller path that creates run pods, then inspect the existing E2E coverage and documentation for agent configuration. Done means an Agent-referenced Secret or ConfigMap is present as environment variables on the run pod in E2E, with the CRD-only pattern documented and no UI or prompt rendering involved.
Written by the indexing model from the issue text.
Description
An Agent may reference Secrets/ConfigMaps (envFrom-style) that the controller injects into run pods as env vars — the documented pattern for "my agent needs an API token" without putting the value in a param or a prompt. Scope fence for dev preview: CRD-level only. No UI surface, no Hub-credential integration, and secrets are never rendered into prompts.
Done when:
- An Agent-referenced Secret appears as env on the run pod in E2E, and the pattern is documented.
Depends on: none.
- Dominant language
- Go
- Stars
- 5
- Forks
- 13
- Avg merge
- 3d 11h
- Merged PRs (30d)
- 41
Getting set up
- Ships a Dockerfile or Docker Compose file
- Has a pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from konveyor/agentic-controller
-
bug stream/controller
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
konveyor/agentic-controller#164 ·
Maintainers usually reply within 1 day
-
documentation good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
konveyor/agentic-controller#124 · 1 comment ·
Maintainers usually reply within 1 day
-
The verification pass cannot read the Verification section a real plan wrote, and runs a line of its prose as a commandPossibly taken @ibolton336 claimed this 1 day ago. Openbug stream/controller
konveyor/agentic-controller#336 · 1 assignee ·
Maintainers usually reply within 1 day
-
Run-time model-call failures lose the provider's error, reaching the user as "Authentication required"Possibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 4/5 3-5 days Newbie friendliness 48/100
konveyor/agentic-controller#323 ·
Maintainers usually reply within 1 day
-
Provider-aware Gateway verification for aws-bedrock / gcp-vertex-ai, so bad credentials fail at verify rather than mid-runPossibly taken @ibolton336 claimed this 3 days ago. Openenhancement stream/controller
konveyor/agentic-controller#304 · 1 assignee ·
Maintainers usually reply within 1 day
All issues in konveyor/agentic-controller
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
CycloneDX/cyclonedx-go#304 ·
-
[Bug]: snowflake_share fails to read a share attached to a listing with target accounts ('TARGETED ACCOUNTS' in the "to" column)Possibly taken @akhil9tiet claimed this today. Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
snowflakedb/terraform-provider-snowflake#5366 · 2 comments ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 83/100
txn2/mcp-data-platform#2493 ·
Maintainers usually reply within 1 day
-
fix(doctor): format MongoDB URI and UNIX socket addresses correctly in doctor diagnostic outputOpenbug good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
oscarbol09/branchbase#178 ·
Maintainers usually reply within 4 days