Skip to content

Roadmap

Milestone state comes from the tests themselves, not from a list kept by hand — the tests are what decide whether a milestone is met, so anything else is a copy waiting to drift.

Milestones

Milestone Applies to State
M0 Reproducible recipe: the build produces the Kong version it declares every image 🟢 reached
M1 Source parity with the extracted 2.0.3 baseline, minus six declared differences Kong < 3, kong-oidc image 🟢 reached
M2 Kong 2.x image is publishable (pre-push gate) Kong < 3 🟢 reached
M2b Kong 2.x variant carries a maintained OIDC implementation Kong < 3, oidcify image 🟢 reached
M3 A replacement is chosen for oidc on Kong 3.x — oidcify Kong >= 3 🟢 reached
M3b A replacement is chosen for jwt-keycloak on Kong 3.x Kong >= 3 🟡 declared outstanding (XFAIL)
M4 Kong 3.x image is publishable Kong >= 3 🟡 declared outstanding (XFAIL)

Open work

High

Item Unblocks
BL-01 Decide what replaces jwt-keycloak on Kong 3.x M3b
BL-02 Kong 3.9.3 Admin API returns 500 with an external plugin registered M4
BL-05 Decide whether to carry the production plugin modifications forward M1

Medium

Item Unblocks
BL-08 Warm up the oidcify plugin server on start —
BL-11 Review oidcify's maintenance once a quarter —

Finished

  • BL-03 Pin the base image by digest, not by tag
  • BL-04 Publish the image that was tested, not a rebuild of it
  • BL-06 Add OCI labels and build provenance
  • BL-09 Scope packages: write to the job that publishes
  • BL-10 Pin GitHub Actions by SHA
  • BL-12 Exclude scripts/ and docs/ from the build context
  • BL-13 plugins/ exists only on disk
  • BL-14 Document where lua-resty-jwt and lua-resty-cookie come from
  • BL-15 CODEOWNERS and branch protection

5 open, 9 finished, 5 of 7 milestones reached.