Issues

• Clusters do not all enforce NetworkPolicy; make enforcement part of the cluster contract

  aws-samples/appmod-blueprints#1239 · Filter by author shapirov103 opened on Nov 3, 2026
  1

• DESTROY_KEEP_DATA does not keep AgentCore memories in a normal destroy

  aws-samples/appmod-blueprints#1227 · Filter by author allamand opened on Nov 2, 2026

• kind-kro-ack: DESTROY_DRY_RUN preview for the destroy sweeps

  aws-samples/appmod-blueprints#1202 · Filter by author allamand opened on Oct 30, 2026

• Backstage: Keycloak users are not in the catalog, so the signed-in user resolves to user:default/<display name> and gets 404s ("owned by me" views empty)

  bug
  aws-samples/appmod-blueprints#1200 · Filter by author allamand opened on Oct 30, 2026

• AMG "X-Ray" datasource fails with "Plugin not registered": the workspace is created with pluginAdminEnabled: false, and the plugin-install failure is only a warning

  bug
  aws-samples/appmod-blueprints#1199 · Filter by author allamand opened on Oct 30, 2026

• seed-observability only creates AMP scrapers for spokes named <prefix>-spoke-dev / <prefix>-spoke-prod; spokes with other names get no metrics

  bug
  aws-samples/appmod-blueprints#1198 · Filter by author allamand opened on Oct 30, 2026

• kind-kro-ack destroy step 6f deletes IAM OIDC providers that belong to other stacks (no prefix or tag filter)

  bug
  aws-samples/appmod-blueprints#1197 · Filter by author allamand opened on Oct 30, 2026

• kind-kro-ack (and kind-crossplane) urls prints the user1 and Keycloak admin passwords at the end of every install

  bug
  aws-samples/appmod-blueprints#1196 · Filter by author allamand opened on Oct 30, 2026

• aiops-agent: autonomous RCA is blind to nodes, Argo CD apps, ACK/kro and EKS insights (403s). Split the agent into separate RCA and chat identities

  aws-samples/appmod-blueprints#1176 · Filter by author allamand opened on Oct 29, 2026

• hub-fleet-secret ApplicationSet does not pass hub.* values, so overlay.useFleetRepo never resolves on the hub

  aws-samples/appmod-blueprints#1159 · Filter by author bagweraj opened on Oct 26, 2026

• setup-gitlab-webhook: webhook creation failure is silently swallowed (step exits 0 -> Workflow shows Succeeded)

  aws-samples/appmod-blueprints#1152 · Filter by author allamand opened on Oct 21, 2026

• CICDPipeline RGD should provision EventBus/default (currently applied only by the ArgoCD cicd app), so the KRO pipeline is self-sufficient

  aws-samples/appmod-blueprints#1151 · Filter by author allamand opened on Oct 21, 2026

• backstage-auth.sh leaves user1's Backstage token + cookie jar in /tmp on the IDE

  bug
  aws-samples/appmod-blueprints#1150 · Filter by author allamand opened on Oct 21, 2026

• bug(validation): backstage_scaffolder() poll loop times out at 5 min -- Java CICDPipeline not created, M30.2-30.5 blocked

  bug
  aws-samples/appmod-blueprints#1148 · Filter by author allamand opened on Oct 20, 2026

• external-secrets cert-controller is pinned to a 64Mi memory limit (== request) — OOMKilled with zero headroom during bring-up

  bug
  aws-samples/appmod-blueprints#1145 · Filter by author allamand opened on Oct 20, 2026

• node-exporter ships with the chart's 1s probe timeout and no resource requests — harden in the observability registry to stop provisioning-time CrashLoopBackOff

  bug
  aws-samples/appmod-blueprints#1144 · Filter by author allamand opened on Oct 20, 2026

• ~/environment/applications/agents/ missing — agents GitLab repo not bootstrapped, Module 60 blocked

  bug
  aws-samples/appmod-blueprints#1143 · Filter by author allamand opened on Oct 20, 2026

• Functional gate always returns HTTP 404 — wrong URL path (root / instead of /java-app/)

  bug
  aws-samples/appmod-blueprints#1141 · Filter by author allamand opened on Oct 20, 2026

• argo retry on cicd-initial-build-workflow fails — git-checkout PVC not cleaned between retries

  bug
  aws-samples/appmod-blueprints#1140 · Filter by author allamand opened on Oct 20, 2026

• Kargo bootstrap intermittently deadlocks: self-signed Issuer OutOfSync, webhook Certificates never Ready, webhook pods stuck ContainerCreating

  bug
  aws-samples/appmod-blueprints#1131 · Filter by author allamand opened on Oct 19, 2026
  1

• hub:claim does not handle empty adminGroupId (follow-up to #1099)

  aws-samples/appmod-blueprints#1124 · Filter by author allamand opened on Oct 17, 2026

• grafana-dashboards-<hub> Degraded when DevLake is absent: grafana-mysql-creds ExternalSecret hard-fails on missing SM key peeks-devlake/mysql-connection — make it conditional/optional

  aws-samples/appmod-blueprints#1120 · Filter by author allamand opened on Oct 17, 2026

• observability-aws-<hub> Degraded: AMP Scraper CRs never reconciled by provider-aws-amp (null .status) — check provider version supports amp Scraper

  aws-samples/appmod-blueprints#1119 · Filter by author allamand opened on Oct 17, 2026
  2

• aiops-agent-<hub> Degraded on event install: provider-aws-bedrockagentcore SA has no EKS PodIdentityAssociation → Bedrock Memory CR ReconcileError (all workload pods healthy)

  aws-samples/appmod-blueprints#1118 · Filter by author allamand opened on Oct 17, 2026

• CI: run the repo's unit tests in GitHub Actions on every push and PR

  enhancementtech-debt
  aws-samples/appmod-blueprints#1115 · Filter by author allamand opened on Oct 17, 2026