Naadir Jeewa comments

Results 249 comments of


                                            Naadir Jeewa

Add support for EKS-D

CC @kschumy We probably don't want to build EKS-D images that are hosted by the Kubernetes SIG Cluster Lifecycle if they're carrying patches which are not part of a released...

Add support for EKS-D

/priority backlog

[e2e] Extend the EKS tests to include bastion tests

Can you prioritise @richardcase ?

Security Self Assessment: [STRIDE-INFODISCLOSE-1] RFE cluster addons

Just adding to this one related to #3176. In EKS, GKE, AKS, VMware TKG-I (formerly Enterprise PKS), and VMware vSphere with Tanzu (formerly TKG-S), workload clusters do not require access...

Security Self Assessment: [STRIDE-INFODISCLOSE-1] RFE cluster addons

/area security

Consider moving etcd to its own volume

Interestingly that would also enable the ability to use EBS volume encryption at rest without having to go through the rigmarole of someone rolling their own AMI.

Try to find and verify existing OIDC providers before we try to create a new one

/ok-to-test

Make controller IAM policies specific to each controller

/assign

Make controller IAM policies specific to each controller

/unassign

Make controller IAM policies specific to each controller

Do we still want to do this given we merged the controllers together?