Nik Skoufis

This updates the Kubernetes CRD and associated tooling to conform to apiextensions/v1. Closes #344 * Changes the apiVersion, and shuffles around some fields based on the new structure of the...

Wait between scenario runs

2

It took me an embarrassingly long time to realise that ```yaml config: runStrategy: minSecondsBetweenRuns: 600 maxSecondsBetweenRuns: 900 strategy: "random" scenarios: - name: Scenario A ... - name: Scenario B ......

The current CRD will stop working when the apiextensions.k8s.io/v1beta1 API is removed in Kubernetes 1.22. The CRD should be updated to the apiextensions.k8s.io/v1 API to continue working. This requires that...

Knative support

12

## Describe the feature Knative currently supports weighted routing, but doesn't have any of the features of Flagger around automating the rollout of new versions. However it feels like the...

[EKS] [request]: Better support for removing instance metadata endpoint access

15

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request * Please do...

JWT/SSO option to restrict access to load and fetch UI (was Add a flag to disable proxy/fetch endpoint)

4

Is there a flag that allows you to disable the `/fortio/fetch` endpoint on the server? This is an SSRF vulnerability if the server instance is ever exposed to the internet.

Cater for more locked down environments

1

In locked down environments that use PSPs, you can't just launch a privileged pod. Example: ``` $ kubectl sniff -p INFO[0000] no container specified, taking first container we found in...

Currently, the notifications that are sent from the kustomize controller contain all the resources processed by the kustomization. When there are large numbers of resources, the unchanged resources overwhelm the...

Add topologySpreadConstraints field to operator k8s opts

3

This adds the topologySpreadConstraints field to the k8s section of the operator CRD. This field is an alternative to common anti-affinity configurations that attempt to configure pods to spread evenly...

Update VirtualService docs with defaults for retry behaviour, remove required attribute on attempts

12

This updates the documentation for the VirtualService resource to include the default values for the `onRetry`, `attempts` and `retryRemoteLocalities` fields. It also updates the main `HTTPRoute` docs to include a...