Gerrit

I would propose a flag for create commands `--dry-run`. If set, the create command should skip the actual call to the Create implementation and instead print the create request. This...

Did we ask some people from the Gardener community in the past on how they deal with this? As the problem originates from the kubeproxy, I assume that running Calico...

According to the Cilium documentation it sounds to me like `externalTrafficPolicy=Cluster` does not obscure source IPs when running in DSR mode. But maybe I did not understand it correctly then....

Very rough idea: - Remove the finalizers from the resources on migrate - Restore firewall resources from the firewall monitor resources in the shoot

With #308 we can make the firewall survive the shoot migration. However, as the firewall-controller is now maintaining a seed client for reconciliation, the seed client becomes invalid after a...

If there are any more question feel free to re-open.

Another idea that comes to mind is implementing a validation webhook. This could run as a dedicated pod in the seed's shoot namespace and watch the shoot api-server. This way,...

Needs rebase

For some fields we were lucky before because we returned directly what was returned from the RethinkDB, which never returns `nil` but an empty slice for document fields. Therefore we...

To me it looks good now. Locally, it reduced the provisioning time quite significantly: ``` # first run make control-plane 0.75s user 0.65s system 0% cpu 2:50.32 total # second...