Steve Kuznetsov

> That would hide potential issues in teardown Which? Before we spend more time working on an implementation can we determine why the (stupid simple) approach of doing more retries...

Of course it would hit all pods, but we poll every 2 seconds right now, so the only cases where increasing the timeout would actually increase the time taken for...

Thats exactly the (well documented) API for the tool...

In addition to dynamically determining this based on bound APIs within a workspace, I think we can also get a lot of value today from having (semi-static) published definitions for...

Looks like `TestAPIExportPermissionClaims` in `test/e2e/virtual/apiexport/virtualworkspace_test.go` does not fully handle these cases. First, it claims: ``` t.Logf("Verify that we get empty lists for all claimed resources (other than apibindings) because the...

Corollary nit: should not be capitalizing `Workspace.tenancy...`

The GoDoc on `clusterworkspaceshard.tenancy.kcp.dev` field `.spec.externalURL` reads: > // ExternalURL is the externally visible address presented to users in Workspace URLs. // Changing this will break all existing workspaces on...

Hm, I thought both at once should have worked. In any case, I think for now we are pausing this so let's re-consider it when we have more clarity about...

Outside of the authorizer tests, we are basically going to benefit from unprivileged clients from a DX perspective.

cc @MikeSpreitzer @sttts @ncdc