Issues

• Node Discovery IPv6 support

  f5devcentral/bnk-forge#218 · Filter by author tkam8 opened on Sep 10, 2026

• Bump Helm to 3.22.0 (x/crypto 0.55.0) and drop CVE-2026-56854 trivyignore

  f5devcentral/bnk-forge#214 · Filter by author jgruberf5 opened on Sep 8, 2026

• Auto-rescan a cluster's inventory after its modules reach 'applied'

  enhancementkubernetes
  f5devcentral/bnk-forge#213 · Filter by author jgruberf5 opened on Sep 8, 2026

• Honor k8s_sync_enabled / k8s_sync_interval_seconds (no scheduler reader exists)

  enhancementkubernetes
  f5devcentral/bnk-forge#212 · Filter by author jgruberf5 opened on Sep 8, 2026

• kamaji pod count uses hardcoded kamaji-system namespace (#202 class, low likelihood)

  bugkubernetesseverity:low
  f5devcentral/bnk-forge#211 · Filter by author jgruberf5 opened on Sep 8, 2026

• cert-manager in a non-default namespace downgrades status to PARTIAL (hardcoded pod-fetch namespace, #202 class)

  bugkubernetesseverity:medium
  f5devcentral/bnk-forge#210 · Filter by author jgruberf5 opened on Sep 8, 2026

• Release should not push to main: cut the tag, land VERSION/CHANGELOG as a follow-up PR

  cienhancementrelease-blockersecurityseverity:high
  f5devcentral/bnk-forge#197 · Filter by author bonnyr-f5 opened on Aug 24, 2026
  1

• Release workflow cannot push to main: give it a scoped bypass instead of relaxing branch protection

  bugcirelease-blockersecurityseverity:high
  f5devcentral/bnk-forge#196 · Filter by author bonnyr-f5 opened on Aug 24, 2026
  1

• opentofu task logs are buffered until completion — logs_full_size stays 0 for the whole run, and the task list omits log fields entirely

  backendbugobservabilityopentofuseverity:medium
  f5devcentral/bnk-forge#195 · Filter by author jgruberf5 opened on Aug 21, 2026
  2

• Cluster inventory never syncs: last_synced_at stays null and a no-op PUT does not trigger a rescan

  bugkubernetesseverity:high
  f5devcentral/bnk-forge#194 · Filter by author jgruberf5 opened on Aug 21, 2026
  1

• credential-templates: provider is unvalidated, so provider="ibmcloud" silently injects no credentials

  backendbugcredentials
  f5devcentral/bnk-forge#191 · Filter by author jgruberf5 opened on Aug 20, 2026

• staging has no branch protection — CI security gates run but don't block merges

  cisecurityseverity:medium
  f5devcentral/bnk-forge#185 · Filter by author jgruberf5 opened on Aug 20, 2026

• Wire 'View State' and 'Recover' actions in StateInfoPopover

  frontendseverity:lowtech-debt
  f5devcentral/bnk-forge#176 · Filter by author jgruberf5 opened on Aug 19, 2026

• Re-enable frontend suites skipped by the batch-connectivity → SSE-reachability migration

  frontendseverity:lowtech-debttesting
  f5devcentral/bnk-forge#175 · Filter by author jgruberf5 opened on Aug 19, 2026

• Frontend tests: 57 requests escape msw to ECONNREFUSED — latent copies of the CI #88 teardown race

  bugfrontendseverity:lowtesting
  f5devcentral/bnk-forge#153 · Filter by author jgruberf5 opened on Aug 18, 2026

• Monaco web worker must stay bundled locally — PR #135 removes it, and the stated build incompatibility does not reproduce in CI

  frontendverified
  f5devcentral/bnk-forge#137 · Filter by author mwiget opened on Aug 18, 2026

• WAF Policy Manager: manage App Protect CRDs (APPolicy, APLogConf, APUserSig, APSignatures) from Forge

  enhancementkubernetes
  f5devcentral/bnk-forge#136 · Filter by author jgruberf5 opened on Aug 18, 2026

• CI: orphaned shellcheck target, unprotected staging, and a migration collision check blind to sibling PRs

  securitytech-debt
  f5devcentral/bnk-forge#124 · Filter by author bonnyr-f5 opened on Aug 13, 2026
  1

• Document dpus/hosts kubernetes_cluster_id overloading: deploy-registration vs BNK membership (S4)

  bare-metaldocumentation
  f5devcentral/bnk-forge#117 · Filter by author jgruberf5 opened on Aug 10, 2026

• ADR-424 Phase-2: tmfifo host/DPU /30 can mismatch in flash→assign→probe window (W1/W2/W3)

  bare-metalbugseverity:medium
  f5devcentral/bnk-forge#115 · Filter by author jgruberf5 opened on Aug 10, 2026
  1

• Review guards: Semgrep INV-1 + cross-PR migration-collision check (pre-push + CI)

  cienhancementsecuritytesting
  f5devcentral/bnk-forge#112 · Filter by author jgruberf5 opened on Aug 10, 2026

• ADR-424 Phase 1 — deferred cold-audit follow-ups (D/E/F)

  backendbare-metalenhancement
  f5devcentral/bnk-forge#111 · Filter by author jgruberf5 opened on Aug 10, 2026

• ADR-494 follow-ups — correctness hardening, robustness & cleanup

  backendenhancement
  f5devcentral/bnk-forge#110 · Filter by author jgruberf5 opened on Aug 10, 2026

• bnk-license: make licenses.k8s.f5net.com CRD/CWC readiness gate timeout-tolerant on cold clusters

  bare-metalenhancementkubernetes
  f5devcentral/bnk-forge#109 · Filter by author jgruberf5 opened on Aug 10, 2026

• Migrations: adopt alembic native hash revision IDs to eliminate merge-time id collisions

  databaseenhancementtech-debt
  f5devcentral/bnk-forge#108 · Filter by author jgruberf5 opened on Aug 10, 2026