Casper Thygesen

There is some fixes in the main branch regarding custom resources which are quite desirable: https://github.com/opensearch-project/opensearch-k8s-operator/compare/v2.5.0...main Could we get a new release (perhaps a patch for 2.5.2) or is there...

[Bug]: strimzi.resources metric is missing in new unidirectional topic operator

11

### Bug Description It is documented here: https://github.com/strimzi/proposals/blob/main/051-unidirectional-topic-operator.md#metrics But it does not seem to be carried over from the old operator. After upgrading, we are not able to see any...

Added OAuth2 support for kafka and OpenSearch

2

https://github.com/benthosdev/benthos/pull/2405 https://github.com/benthosdev/benthos/pull/2403 I will make a new PR that supports clientcredentials directly in OpenSearch, once my other PRs are merged

Added direct support for oauth2 tokens in kafka using franz-lib

2

Initially I thought it was not supported, but I talked to the author of the library a while ago and got it confirmed: https://github.com/twmb/franz-go/issues/482 I then implemented the setup in...

Added support for oauth2 tokens in opensearch output sink

1

Not sure if we can support oauth2 directly with client+id credentials or we need to rely on cache resource to ensure performance. I did the later, as it is how...

Document Cipher Suite and TLS version used

2

OpenSearch has a list of default cipher suites: https://github.com/opensearch-project/OpenSearch/blob/main/libs/ssl-config/src/main/java/org/opensearch/common/ssl/SslConfigurationLoader.java#L361 and it is also possible to configure the list: https://opensearch.org/docs/latest/security/configuration/tls/#advanced-enabled-ciphers-and-protocols However, as the different setting also impacts performance, I would like...

OAuth2 support

1

**Is your feature request related to a problem? Please describe.** Our security model only allows OAuth2 authentication. See snippet: ```yaml openid_auth_domain: order: 1 description: "Authenticate via OIDC" http_enabled: true transport_enabled:...

Initial design of additionalVolumes support

3

### Type of change - Enhancement / new feature ### Description This is a solution design for an upcoming proposal (https://github.com/strimzi/proposals/pull/120) supporting #3693 It will need testcoverage and more. Right...

Missing securityContext attributes on container kube-rbac-proxy

1

### Description Allows the following setup ```yaml kubeRbacProxy: securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true capabilities: drop: - all ``` ### Issues Resolved Fixes [#745](https://github.com/opensearch-project/opensearch-k8s-operator/issues/745) ### Check List - [x] Commits are...

[PROPOSAL] OpenSearchISMPolicy.applyToExistingIndices

2

## What/Why ### What are you proposing? _In a few sentences, describe the feature and its core capabilities._ We are considering a design where a `applyToExistingIndices` is added to the...