Issues

• Add workbenches v2 (workspaces-controller) to the operator-chaos knowledge model

  opendatahub-io/workbenches-operator#114 · Filter by author jstourac opened on Aug 23, 2026

• Strengthen ImageStream E2E coverage for Kind CI

  opendatahub-io/workbenches-operator#106 · Filter by author coderabbitai opened on Aug 19, 2026
  

• Add E2E coverage for managed platformVersion handshake transitions

  opendatahub-io/workbenches-operator#105 · Filter by author coderabbitai opened on Aug 19, 2026
  

• Clean up node scheduling when an existing HardwareProfile switches to Kueue

  opendatahub-io/workbenches-operator#76 · Filter by author coderabbitai opened on Jul 29, 2026
  

• Scope controller-runtime cache/watch to APPLICATIONS_NAMESPACE for ConfigMap and Deployment informers

  opendatahub-io/workbenches-operator#43 · Filter by author coderabbitai opened on Jul 15, 2026
  

• Discuss: webhook clears container resources on HardwareProfile switch (differs from opendatahub-operator)

  opendatahub-io/workbenches-operator#40 · Filter by author jstourac opened on Jul 15, 2026

• Gate cross-namespace HardwareProfile reads with SubjectAccessReview (CWE-862)

  opendatahub-io/workbenches-operator#38 · Filter by author coderabbitai opened on Jul 14, 2026
  

• Add default-deny NetworkPolicy for operator and webhook pods

  opendatahub-io/workbenches-operator#24 · Filter by author jstourac opened on Jul 2, 2026

• Replace client.Update calls with client.Patch (SSA) where possible to reduce conflicts

  opendatahub-io/workbenches-operator#23 · Filter by author jstourac opened on Jul 2, 2026

• Follow up: harden Helm RBAC escalation allowlist against upstream ClusterRole drift

  opendatahub-io/workbenches-operator#21 · Filter by author coderabbitai opened on Jun 25, 2026
  

• Follow up: move Helm CRD from templates/ to crds/ lifecycle

  opendatahub-io/workbenches-operator#20 · Filter by author coderabbitai opened on Jun 25, 2026
  

• Decide how to handle duplicated Workbenches CRD between config/ and Helm chart

  opendatahub-io/workbenches-operator#19 · Filter by author coderabbitai opened on Jun 25, 2026
  

• Replace isNamespaced hardcoded denylist with RESTMapper-based GVK scope resolution

  opendatahub-io/workbenches-operator#12 · Filter by author coderabbitai opened on May 21, 2026

• Pin upstream manifest references to immutable commit SHAs (supply-chain hardening)

  opendatahub-io/workbenches-operator#11 · Filter by author coderabbitai opened on May 21, 2026
  

• internal/gvk: Replace mutable exported GVK vars with unexported vars and getter functions

  good first issue
  opendatahub-io/workbenches-operator#9 · Filter by author coderabbitai opened on May 20, 2026
  

• Fix stale status conditions in setErrorStatus reconciler error path

  good first issue
  opendatahub-io/workbenches-operator#8 · Filter by author coderabbitai opened on May 20, 2026
  

• RBAC: Scope namespace write permissions to specific workbench namespaces

  opendatahub-io/workbenches-operator#6 · Filter by author coderabbitai opened on May 20, 2026
  

• Investigate impact of unconditionally labeling pre-existing namespaces as operator-owned

  opendatahub-io/workbenches-operator#5 · Filter by author jstourac opened on May 20, 2026

• Add FQDN pattern validation for GatewayDomain field in WorkbenchesSpec

  good first issue
  opendatahub-io/workbenches-operator#4 · Filter by author coderabbitai opened on May 20, 2026