Krzysztof Ostrowski

Results 90 comments of Krzysztof Ostrowski

Hi @vasireddy99, this is not true. We have a dependency that has that vulnerability, but we don't use `encoding/gob` package, so we are **NOT** vulnerable. I will take this as...

The `--upstream-ca-file` must be the CA that signed upstream's certificate. This would mean that, e.g. the controller manager's cert must be signed by whatever is in `/etc/ssl/certs/ca.crt`. Can you verify...

That is quite common to give the metrics endpoint different certificates. It is a kind of "authentication" by cert :) I will close it. In case that you feel different,...

@cdash415, I am aware of it now. I will work on a release.

It is intended, but not necessary as the attributes for a path request only fill User, Verb and Path. If we nil all the other values, we could create a...