Issues

• Infisical provider: cache the machine-identity access token across reconciles

  kind/feature
  external-secrets/external-secrets#7069 · Filter by author arthlr opened on Oct 2, 2026

• feat: Add cron-based scheduling or time-window for ExternalSecret synchronization

  kind/featuretriage/pending-triage
  external-secrets/external-secrets#7064 · Filter by author zzzmarcos opened on Oct 2, 2026
  1

• Kubernetes GetAllSecrets: dataFrom.find name and tags are mutually exclusive (name regexp ignored when tags is set)

  triage/pending-triage
  external-secrets/external-secrets#7063 · Filter by author the-powerpointer opened on Oct 2, 2026

• Feature Request: Per-PushSecret Failure Policy

  kind/featuretriage/pending-triage
  external-secrets/external-secrets#7059 · Filter by author cf-nhatfield opened on Oct 1, 2026

• DVLS provider: vault lookup by name fails with "multiple vaults found" when more than 25 vaults are visible

  kind/bugtriage/pending-triage
  external-secrets/external-secrets#7057 · Filter by author dion-gionet opened on Sep 30, 2026

• DVLS provider: PushSecret ignores remoteRef.property, so a username/password entry cannot be pushed

  triage/pending-triage
  external-secrets/external-secrets#7054 · Filter by author terem42 opened on Sep 30, 2026

• 1Password Connect: PushSecret with multiple data entries for one item intermittently fails with 400 "Unable to update item"

  area/pushsecretarea/1passwordkind/bug
  external-secrets/external-secrets#7053 · Filter by author qnimbus opened on Sep 29, 2026

• Templating is O(n²) in the number of keys since 1.0.0: setField round-trips the whole object per key

  area/templatingkind/bugkind/performancepriority/important-soon
  external-secrets/external-secrets#7037 · Filter by author stefan-korchahin opened on Sep 25, 2026
  2

  

• PushSecret fails on creation of Secrets in Delinea SecretServer requiring multiple fields

  area/secretserverkind/bugtrack/providers
  external-secrets/external-secrets#7017 · Filter by author LUMERIIX opened on Sep 23, 2026
  3

• ClusterExternalSecret with a name longer than 59 characters stops provisioning ExternalSecrets entirely

  kind/bug
  external-secrets/external-secrets#7016 · Filter by author tspearconquest opened on Sep 22, 2026
  2

  

• Provider produced inconsistent final plan

  triage/support
  external-secrets/external-secrets#7009 · Filter by author glensc opened on Sep 21, 2026
  1

  

• DVLS provider: PushSecret cannot create a missing entry, so a vault can never be bootstrapped

  area/dvlskind/feature
  external-secrets/external-secrets#6988 · Filter by author terem42 opened on Sep 18, 2026
  1

• ci: verify ServiceMonitor metrics relationships

  area/chartskind/feature
  external-secrets/external-secrets#6987 · Filter by author lokesh0186 opened on Sep 18, 2026
  1

  

• Helm plugin targets fail on Helm 4: plugin install defaults to --verify=true

  kind/bug
  external-secrets/external-secrets#6984 · Filter by author alekc opened on Sep 17, 2026

• [AWS] Optional roleSecretRef on SecretStore / ClusterSecretStore (parity with auth.secretRef)

  area/awskind/feature
  Feature

  external-secrets/external-secrets#6972 · Filter by author bharath-b-rh opened on Sep 16, 2026
  6

  

• [AWS] Build cross-account SM/SSM identifiers from name + account via ExternalSecret annotations

  kind/feature
  external-secrets/external-secrets#6971 · Filter by author bharath-b-rh opened on Sep 16, 2026
  

• Akeyless provider ignores HTTP(S)_PROXY when CABundle/CAProvider is configured

  area/akeylesskind/bug
  external-secrets/external-secrets#6969 · Filter by author nils-dehn opened on Sep 15, 2026
  1

• Vault: buildMetadataPath does not strip the mount prefix that buildPath strips, deadlocking PushSecret on pre-existing secrets

  area/vaultkind/bug
  external-secrets/external-secrets#6968 · Filter by author John2020-cyber opened on Sep 15, 2026
  1

  

• GithubAccessToken and MFA generators omit the namespace from secret lookup errors

  kind/bugtrack/core
  external-secrets/external-secrets#6965 · Filter by author alekc opened on Sep 14, 2026

• docs: PushSecret guide never documents spec.selector

  area/docskind/documentation
  external-secrets/external-secrets#6964 · Filter by author alekc opened on Sep 14, 2026

• Add webhook.createValidatingWebhookConfiguration toggle to control VWC independently

  kind/feature
  external-secrets/external-secrets#6961 · Filter by author kriszkern opened on Sep 14, 2026
  10

• CRD schema marks fields that have a +kubebuilder:default as required, breaking client-side validation

  wont-do
  external-secrets/external-secrets#6946 · Filter by author ulrichgiraud opened on Sep 10, 2026
  4

• PushSecret: support templating in remoteRef.remoteKey for label-selector (1:N) sources

  kind/designkind/featuretrack/core
  external-secrets/external-secrets#6945 · Filter by author Laouni98 opened on Sep 10, 2026
  1

• onepasswordsdk: cached SDK client is never recreated after an unrecoverable WASM error, all ExternalSecrets stay NotReady until pod restart

  area/1passwordkind/bug
  external-secrets/external-secrets#6941 · Filter by author dyegoe opened on Sep 9, 2026
  3

• [Bug] Vault AWS IAM auth with auth.iam.role causes unrelated SecretStores to fail STS AssumeRole

  area/awsarea/securityarea/vaultkind/bug
  external-secrets/external-secrets#6937 · Filter by author BobbyRaj17 opened on Sep 8, 2026
  5