Issues

• Kyverno fail-closed webhook races core addons on fresh clusters (blocks external-secrets Deployments)

  aws-samples/appmod-blueprints#1035 · Filter by author allamand opened on Oct 12, 2026

• Tracking: fixes from a full self-paced workshop run (Modules 1, 2, 3, 5)

  aws-samples/appmod-blueprints#1032 · Filter by author pnz1990 opened on Oct 10, 2026

• AppmodService metrics analysis isn't scoped to the cluster or the canary: a prod gate reads dev pods, and stable pods dilute the canary

  aws-samples/appmod-blueprints#1027 · Filter by author pnz1990 opened on Oct 10, 2026

• CICDPipeline DORA setup succeeds with empty DevLake ids when DevLake is unavailable, and the seed reports data it never stored

  aws-samples/appmod-blueprints#1026 · Filter by author pnz1990 opened on Oct 10, 2026

• AppmodService (kro) with only one analysis gate enabled renders an invalid Rollout ("AnalysisTemplate ... not found")

  aws-samples/appmod-blueprints#1025 · Filter by author pnz1990 opened on Oct 10, 2026

• Removing a KRO spoke leaks its IAM roles/policies, CARM selectors, a scheduled-for-deletion <cluster>/config secret and the EKS log group

  aws-samples/appmod-blueprints#1020 · Filter by author pnz1990 opened on Oct 10, 2026

• spokes:disable-kro leaves the spoke registered in Argo CD (fleet member file, clusters-kro/fleet-secret apps and cluster Secret)

  aws-samples/appmod-blueprints#1019 · Filter by author pnz1990 opened on Oct 10, 2026

• spokes:enable-kro / enable-crossplane abort when the spoke name contains no dev/prod/staging/test (errexit + pipefail on the env grep)

  aws-samples/appmod-blueprints#1018 · Filter by author pnz1990 opened on Oct 10, 2026

• CICDPipeline ECR Repositories lose adopt-or-create (duplicate annotations: key), so pipelines fail when the repo already exists

  aws-samples/appmod-blueprints#993 · Filter by author pnz1990 opened on Oct 9, 2026

• idc:configure's "tolerant" failure path exits 1 ([ "$IDC_STRICT" = true ] && exit 1), aborting task install

  aws-samples/appmod-blueprints#990 · Filter by author pnz1990 opened on Oct 9, 2026

• Teardown IAM sweeps delete the self-paced stack's own Lambda roles, so the CFN stack delete hangs and fails

  aws-samples/appmod-blueprints#989 · Filter by author pnz1990 opened on Oct 9, 2026

• Teardown SG sweep (step 6i) revokes and deletes CFN-owned SGs in the workshop VPC, cutting the IDE's EFS NFS access mid-destroy

  aws-samples/appmod-blueprints#988 · Filter by author pnz1990 opened on Oct 9, 2026

• security: CICDPipeline DORA workflows inline the webhook body into shell, and the webhook is unauthenticated and publicly routed

  aws-samples/appmod-blueprints#987 · Filter by author pnz1990 opened on Oct 9, 2026

• Rust Metrics CPU/Memory panels and KubeVela metric gates query nonexistent k8s_* labels (#732 regressed)

  aws-samples/appmod-blueprints#986 · Filter by author pnz1990 opened on Oct 9, 2026

• Kargo NewestBuild stays on initial: Java images inherit the Tomcat base's image.created annotation

  aws-samples/appmod-blueprints#985 · Filter by author pnz1990 opened on Oct 9, 2026

• DORA check-rollout-status polls by retrying pods: re-downloads unpinned kubectl every 10s, leaves Error pods

  aws-samples/appmod-blueprints#984 · Filter by author pnz1990 opened on Oct 9, 2026

• DORA seed IDs aren't team-scoped: CFR panels count other teams' incidents, and real MRs overwrite seeded PRs

  aws-samples/appmod-blueprints#983 · Filter by author pnz1990 opened on Oct 9, 2026

• DORA deployment records use commit timestamps as started/finished dates, so lead-time "deploy" is always 0

  aws-samples/appmod-blueprints#982 · Filter by author pnz1990 opened on Oct 9, 2026

• DORA records dev rollouts as PRODUCTION and never sends real prod deployments (Kargo or prod manifest commits)

  aws-samples/appmod-blueprints#981 · Filter by author pnz1990 opened on Oct 9, 2026

• CI update-git-repo rewrites all of deployment/, incl. prod/ and templates/: every build reaches prod ungated

  aws-samples/appmod-blueprints#980 · Filter by author pnz1990 opened on Oct 9, 2026

• CICDPipeline stuck READY=False ("cluster mutated"): kro prunes the EventSource's generated Service in a loop

  aws-samples/appmod-blueprints#979 · Filter by author pnz1990 opened on Oct 9, 2026

• AppmodService (kro) lost metrics-driven analysis in the #529 merge: evaluationCriteria pruned, no Rollout step

  aws-samples/appmod-blueprints#978 · Filter by author pnz1990 opened on Oct 9, 2026

• AppmodService canary never reaches canary pods via the Ingress: stableService pins it to stable pods

  aws-samples/appmod-blueprints#976 · Filter by author pnz1990 opened on Oct 9, 2026

• next-js manifest deploys a May-2025 nextjs-ui:latest image that predates #811, so product images 400

  aws-samples/appmod-blueprints#975 · Filter by author pnz1990 opened on Oct 9, 2026
  1

• next-js API_BASE_URL targets rust-microservice, but the kro Rust app only has rust-microservice-<env>

  aws-samples/appmod-blueprints#974 · Filter by author pnz1990 opened on Oct 9, 2026