Issues

• bug(ci): the pin rollup runs about every 8 hours, not every 30 minutes — trigger it when the Image build finishes

  blockedbugP2ready-to-implement
  stardelt/stardelt-platform#1013 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.4
  10

• README: a short front page like the organisation profile; the 2,869-line manual moves unchanged into docs/

  blockeddocumentationP2
  stardelt/stardelt-platform#984 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.4
  3

• update: SeaweedFS 4.25 → 4.53 — read 28 releases, set a pace for a starter

  architectureP3
  stardelt/stardelt-platform#978 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.5

• update: patch batch — Airflow 3.2.2 (chart 1.22.0), Spark 4.1.4, OpenBao 0.30.7, External Secrets 2.15.0, Reloader 2.2.20

  architectureP2
  stardelt/stardelt-platform#976 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.4
  1

• update: Superset 5.0 → 6.1, and the deprecated Helm chart — stay on it for now, spike the Superset operator

  architectureP2
  stardelt/stardelt-platform#975 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.5

• update: the notebook image off its 2024 base now; JupyterHub 6 when its chart is released

  architectureP2
  stardelt/stardelt-platform#973 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.4
  1

• update: Lakekeeper 0.12 → 0.15 with OpenFGA 1.14 → 1.22 — the write privilege, view security, the bridge (spike first)

  architectureP1
  stardelt/stardelt-platform#972 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.4

• epic: component updates 2026-11 — what we can take, what breaks, in which order

  architectureP1
  stardelt/stardelt-platform#971 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.4

• design + spike: a pipeline runs when its input tables are updated — spec.triggers, fed by task writes and lineage

  architectureenhancementP2
  stardelt/stardelt-platform#970 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.5
  1

• design: enterprise secret stores (Azure Key Vault, AWS, Google, Infisical, Vault) — one store per group, register from Nova, read from notebooks

  architectureP1
  stardelt/stardelt-platform#936 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.5

• feat(jupyter): the 2 GiB pod and the pinned image for VS Code in the browser (platform#158 follow-up to #919)

  enhancementP3
  stardelt/stardelt-platform#930 · Filter by author schwarztrinker opened on Nov 11, 2026 · v0.3

• bug(jupyter): the code-server patch of #919 breaks the notebook image's home (and the proxy path is /vscode/, not /proxy/8899/)

  bugP3
  stardelt/stardelt-platform#922 · Filter by author schwarztrinker opened on Nov 10, 2026 · v0.3

• epic: public demo in the lab — 'Try the demo' on stardelt.io, sign-in demo/demo, sample data, nightly reset

  architectureP1security
  stardelt/stardelt-platform#895 · Filter by author schwarztrinker opened on Nov 10, 2026 · v0.4
  7

• design: Spark compute tiers on the platform — runtime catalogue, shared tier as SparkCluster, group labels on notebook pods, NetworkPolicy (internal#161 slice 4)

  P2
  stardelt/stardelt-platform#809 · Filter by author schwarztrinker opened on Nov 9, 2026 · v0.4
  3

• design: product boundary — stardelt ships the lakehouse; identity, secrets, storage, BI and monitoring plug in from the enterprise

  architectureenhancementP1
  stardelt/stardelt-platform#614 · Filter by author schwarztrinker opened on Nov 7, 2026 · v0.4
  2

• design: any OIDC provider — discovery everywhere, group sync without the Keycloak admin API, a second provider in CI

  architectureenhancementP1
  stardelt/stardelt-platform#611 · Filter by author schwarztrinker opened on Nov 7, 2026 · v0.4
  1

• bug(cluster): the dev node returns I/O errors on sda and unpacks corrupt image layers — keycloak cannot exec its entrypoint

  bugP2
  stardelt/stardelt-platform#554 · Filter by author schwarztrinker opened on Nov 6, 2026 · v0.2
  6

• decision: the dev node's disk is shared by the build plane and the platform — move the build caches, or cap them?

  P0question/rfc
  stardelt/stardelt-platform#553 · Filter by author schwarztrinker opened on Nov 6, 2026 · v0.2

• bug: a node-wide stall takes the catalog down — OpenFGA restarted 11 times, Lakekeeper answered 503 to table reads

  bugP1
  stardelt/stardelt-platform#516 · Filter by author schwarztrinker opened on Nov 4, 2026 · v0.2
  18

• spike: a Superset dashboard as code — import, idempotency and whose identity queries Trino (demo slice G)

  architectureenhancementP2
  stardelt/stardelt-platform#470 · Filter by author schwarztrinker opened on Nov 1, 2026 · v0.6

• spike: write-audit-publish for tables — Iceberg branches through Trino and Lakekeeper

  architectureenhancementP3spike
  stardelt/stardelt-platform#458 · Filter by author schwarztrinker opened on Nov 1, 2026 · v0.7

• spike + design: CI without a stored secret — a deploy principal per stage, trusted by federation (Keycloak 26.8 federated client authentication)

  architectureenhancementP1spike
  stardelt/stardelt-platform#457 · Filter by author schwarztrinker opened on Nov 1, 2026 · v0.5

• design: admin network allow-list for the platform's public endpoints (PlatformInstance.spec.network.allowedCidrs)

  architectureenhancementP2phase-nowsecurity
  stardelt/stardelt-platform#427 · Filter by author schwarztrinker opened on Oct 30, 2026 · v0.4
  1

• design: the install is proven from scratch — a clean cluster, one command, verified

  architectureP1
  stardelt/stardelt-platform#421 · Filter by author schwarztrinker opened on Oct 22, 2026 · v0.4
  2

• design: air-gapped installs — a signed image and chart bundle for an on-prem registry

  architectureP3phase-later
  stardelt/stardelt-platform#411 · Filter by author schwarztrinker opened on Oct 22, 2026 · v0.7