-
By default, k3s wont add this label on agents.
![image](https://github.com/orange-cloudfoundry/k3s-wrapper-boshrelease/assets/4748380/111bcfdf-bf4d-4f1d-81e3-b042859d46a7)
The k3s bosh release …
-
Currently the upstream can only be an URL to an http(s) endpoint which is bound to a network address and port. This would be nice to have a dedicated flag for the upstream which exposes a unix domain …
-
**What would you like to be added**:
Support for `kubectl auth can-i verb *.group` queries.
**Why is this needed**:
Currently it's not possible to make such queries because [the code](https:/…
-
### Which jobs are failing?
capz-windows-containerd-master
### Which tests are failing?
``[sig-node] Container Runtime blackbox test when running a container with a new image should be able to pull…
-
Version markers are text files stored in the root of various GCS buckets:
- CI: https://gcsweb.k8s.io/gcs/kubernetes-release-dev/ci
- Release: https://gcsweb.k8s.io/gcs/kubernetes-release/release
…
-
Similar to https://kubernetes.io/docs/reference/labels-annotations-taints/ (should probably be a separate page though).
The current (2023-02-08) list of well-known audit annotations is:
- [x] `a…
-
### Enhancement Description
- One-line enhancement description (can be used as a release note): This proposal provides a built-in capability for pods to authenticate to kube-apiserver using mTLS. …
-
A webhook token authenticator can assert which `audiences` a token is valid for:
https://github.com/kubernetes/kubernetes/blob/6d0aab2e38364d9d8e050b5f3a120a36ee588389/staging/src/k8s.io/api/authen…
-
### Motivation: Why do you think this is important?
Currently only native k8s token based auth is supported, in both flyteadmin and various plugins. For example [in flyteadmin](https://github.com/fly…
-
### What would you like to be added?
Following up from this discussion - https://github.com/kubernetes/kubernetes/pull/116420#issuecomment-1500602135
There are different components that fall in …