ChristianCiach

It feels wrong to install pacemaker on an arbitrator-only node. Also, corosync is A LOT more tolerant regarding different corosync versions inside the cluster. But an outdated pacemaker installation on...

> why install pacemaker version different than what other nodes in the cluster have in the first place? Exactly this was the issue. The arbitrator node has just been "forgotten"...

But wouldn't pacemaker be started by pcs when doing a "pcs cluster start"?

I don't really get what you are saying. AFAIK, the arbitrator would become part of the cluster as soon as I configure corosync through pcs. Maybe I am wrong on...

Ne, we are not :) We are using corosync as the arbitrator.

@lyon667 Awesome! I didn't know I could use corosync-qdevice without a full corosync installation! This seems promising! Actually, I may even use Booth instead. When we created the cluster around...

Don't `cosign attach sbom` and `cosign attest` have the same issue? When used with tags, you may attach sboms or attestations to the wrong image.

Please also make sure that references like `repo:tag@digest` continue to work. This means that the warning should not be emitted when a tag is present, but only when a digest...

We, too, are sad to see that MDC values are not namespaced under `labels` anymore. I would even go as far to say that #67 was a very bad change,...

> This change was introduced before version 1.0.0 was released. According to semantic versioning, breaking changes in 0.x are expected. That's fair. I still think this was a change for...