sean/kratos-identity-operator
Watch
1
0
Fork
You've already forked kratos-identity-operator
 0
Code Issues Pull requests Projects Releases 22 Packages Wiki Activity
22 releases 33 tags
  • v0.5.19 4373046ad4

    v0.5.19 Stable

    pipeline-bot released this 2026-07-28 15:39:07 +00:00 | 12 commits to trunk since this release

    Fixed

    • A transient Kratos 4xx no longer abandons a KratosIdentity forever.
      kratosTaxonomy classified ConfigurationError as Terminal, and Terminal
      makes the shared harness return an empty result with no error, so
      controller-runtime drops the item; with no manager-wide resync and the 5m
      ready cadence only on the success path, nothing ever re-enqueued it.
      classifyKratosError maps every non-404/409, non-401/403/408/429/5xx
      response to ConfigurationError, which includes the 400/422 Kratos returns
      when a password fails its policy — including the HaveIBeenPwned breach-list
      lookup, a live outbound call that can fail transiently. One such blip left
      the identity uncreated and the user unable to log in until somebody edited
      the spec. Terminal is only sound for a reason that is a pure function of the
      CR (InvalidSpec, where the fix is itself a spec edit that re-enqueues); a
      remote verdict has no corresponding Kubernetes event when it clears.
      ConfigurationError now uses a fixed 5-minute requeue, which keeps the
      latched Degraded=ConfigurationError status visible without a backoff storm
      while guaranteeing self-heal.

    Included changes (v0.5.18 -> v0.5.19)

    • 839ad8db4957 chore: re-trigger CI (previous run hit a transient compile-step failure)
    • 03b84cbc7321 fix(reconcile): requeue ConfigurationError instead of dropping the identity
    Downloads