Gerrit

/retest-required

Required tests are now passing. Another review would be much appreciated. I am also keen to try this in the local kind cluster and hopefully see it's working as intended....

Found some missing permissions on the Gardenlet. Saw it working now for the first time locally. :smile: ``` ❯ kubectl -n shoot--local--local get authorizationpolicies.security.istio.io kube-apiserver -o yaml apiVersion: security.istio.io/v1beta1 kind:...

As I was playing around more with this, I found some major problems that I need to resolve first. I was hoping that the foundation of this is already working,...

@einfachnuralex Yes, that would be great! I can also showcase the current state of the PR. You can drop me a line on Kubernetes Slack or metal-stack Slack and we...

> [...] or when the istio-ingressgateway service has `externalTrafficPolicy: Local` and the istio-ingressgateway deployment is scaled so that one pod is deployed on each Node of the seed cluster. With...

At the Gardener Hackathon we decided to definitely turn this idea into an extension for Gardener. The initial implementation was provided and published here (could move again in the next...

IMHO we should add a validation of the reported registration data and prevent the metal-hammer to enter the wait phase when for example the neighbor condition cannot be verified from...

It was not related to #31.

Sorry, I do not really have a strong opinion about that. Only thing that comes to my mind is that there would be the opportunity to add this to `MachineState`,...