-
There are many cases where it is useful to mount an immutable data volume into a container, with configuration or static data (or code, it could be an apt repo or whatever).
I am proposing we add a…
-
Since `/etc/ssh/` is on the tmpfs, the VM generates a new ssh key-pair every time is gets rebooted.
I tried to create a virtiofsd share for `/etc/ssh` to keep the keys on the host system, but that ma…
-
### What Happened?
I was trying to use Jenkins with Helm, but the pod kept entering a CrashLoopBackOff state. The issue was resolved by changing the permissions of the directory `/tmp/hostpath-prov…
-
Hi guys,
I am trying use ldap authc by helm deployment. Here is my helm version:
```
NAME NAMESPACE REVISION UPDATED STATUS CHART …
-
## CVE-2021-41802 - Low Severity Vulnerability
Vulnerable Library - vaultv0.10.0
A tool for secrets management, encryption as a service, and privileged access management
Library home page: https://…
-
We see couple of challenges with the current model.
- The users namespace may span multiple clusters and identity management systems.
- The container and host namespaces are decoupled of one ano…
-
### Describe the bug
When deploying a StorageClass, PersistentVolumeClaim and Pod while using the `EfsCsiDriverAddOn` to dynamically provision an EFS Access Point and mount it to the Pod, mounting fa…
-
Quarkus dist options should be read from file(s).
-
I have a user with the "root" policy however i am only able to see one of my generic secret backends secrets. I am able to see all mounts and users, etc. however when i try to view secrets it only lis…
-
It should be possible for a single app pod to consume multiple buckets from the same object store. A pod can mount multiple files (or block devices). If we move the lib to CSI then maybe we get this f…