All pull requests

Pull requests

• physical/azure: fall back to ExpiresOn when refreshing MSI tokens

  #32168·Sanjays2402 opened Oct 18, 2026·

  ·
  1

  2

• transit: return 400 instead of 500 when restoring a key that already exists

  #32167·Sanjays2402 opened Oct 18, 2026·

  ·
  1

  2

• secrets/pki: recover transient initialization failures

  #32161·Sewci0 opened Oct 15, 2026·

  ·

• Retry leadership instead of sealing only the barrier on setup errors

  #32159·shunki-fujita opened Oct 15, 2026·

  ·
  1

  2

• chore: remove unused AI instruction files

  pr/no-changelogpr/no-milestone
  #32153·angelocordon opened Oct 11, 2026Contributor·

  ·

• Fix misleading request URL in errors for unix socket clients

  #32152·MeGaurav4 opened Oct 11, 2026·

  ·
  1

  1

• fix(github): return upstream 4xx instead of 500 on failed GitHub auth

  #32150·Sun-Wukhan opened Oct 10, 2026·

  ·
  1

  1

• ui: add Azure Government domain to DOMAIN_PROVIDER_MAP

  #32147·Ankitraj-sharma opened Oct 7, 2026·

  ·
  1

  1

• Install rotated Raft HA TLS keyring in the active node's transport

  #32140·m9rkt5cw7c-star opened Oct 4, 2026·

  ·
  1

  1

• feat: Add/update AGENTS.md for AI agent guidance

  #32138·jaykrishna316 opened Oct 3, 2026·

  ·
  2

• listenerutil: reload client CA roots on TLS reload

  #32136·Asthenia0412 opened Oct 1, 2026·

  ·
  1

  1

• command/login: respect -no-print when token storage fails

  #32134·piyush295 opened Sep 28, 2026·

  ·
  1

  1

• raft: wait for FSM catch-up before marking node removed

  #32133·Asthenia0412 opened Sep 28, 2026·

  ·
  8

• http: fix missing max_json_token default in listener JSON limits

  #32132·ddl-ebrown opened Sep 26, 2026·

  ·
  3

• agent: add opt-in API for targeted PKI template rotation

  #32130·sgabenov opened Sep 21, 2026·

  ·
  1

  2

• identitytpl: treat closing braces in json templates as document text

  #32128·garmir opened Sep 19, 2026·

  ·
  1

  4

• pki: drop the extra separator from the orphaned crl cleanup path

  #32127·garmir opened Sep 19, 2026·

  ·
  1

  4

• pki: allow underscores in dns sans when enforce_hostnames is false

  #32126·garmir opened Sep 19, 2026·

  ·
  1

  4

• fix(ui): preserve query params when redirecting the legacy secrets path

  #32122·alter opened Sep 19, 2026·

  ·
  1

  4

• adding cli health endpoint for cluster validation

  #32119·moexx399 opened Sep 17, 2026·

  ·
  5

• Password policy consecutive chars

  #32111·drewmullen opened Sep 10, 2026Contributor·7 tasks·

  ·
  1

  4

• 🤖🤖🤖 fix(transit): return HTTP 400 for transit signing UserErrors

  #32108·sparkbountybot opened Sep 10, 2026·

  ·
  1

  4

• CRL implementation

  #32106·shub-est opened Sep 7, 2026·

  ·
  5

• physical/raft: validate peers.json addresses before recovery

  #32105·loglapa opened Sep 3, 2026·

  ·
  1

  10

• fix(ldaputil): use %w for LDAP errors instead of {{err}} placeholder

  bughelper/ldaputilsize:S
  #32098·shoemoney opened Aug 25, 2026·

  ·
  15