Olle Larsson

**Is your feature request related to a problem?** It has been decided that local storage might become a feature that we want to offer or use for other services in...

Default to serial execution of hosts when running the upgrade playbook

2

**Is your feature request related to a problem? Please describe.** For some lays the serial execution is based on a percentage on the number of hosts. For us this is...

**Is your feature request related to a problem? Please describe.** On some clouds there's no limit on size for a bucket but there might instead be some limit on the...

Scan Vulnerability logs does not seems to be parsed correctly

1

**Describe the bug** It appears as if the logs from the vulnerability reports are not handled properly (by fluentd?). In opensearch each line in its output has been put into...

I would like to propose that we move all of the config that's currently under the [`opa`](https://github.com/elastisys/compliantkubernetes-apps/blob/main/config/config/wc-config.yaml#L49) to `gatekeeper` instead (basically renaming). **Definition of done:** Migrated all opa config to...

**Describe the bug** Title. Fluentd alerts are installed 3 times in the workload cluster. Two times by the fluentd-elasticsearch - [fluentd-wc](https://github.com/elastisys/compliantkubernetes-apps/blob/main/helmfile/values/fluentd-wc.yaml.gotmpl#L43-L44) - [fluentd-user](https://github.com/elastisys/compliantkubernetes-apps/blob/main/helmfile/values/fluentd-user.yaml.gotmpl#L50-L51) And one time by the [prometheus-alerts in...

CPU95PercentOnAverage fires for nodes that are no longer part of cluster

2

**Describe the bug** Read title **To Reproduce** 1. Remove node from cluster 2. wait 3. observe alert firing **Expected behavior** Nodes that have been removed should be excluded from the...

**What should be investigated.** Fluentd consumes quite a bit of resources on all of the hosts. We want to minimize the footprint, if possible, of the ck8s services, and Fluent...

User alertmanager cleanup

5

**Is your feature request related to a problem? Please describe.** It should not be possible to deploy an ingress for user alertmanager as it should be access via `kubectl proxy`...

**Describe the bug** We have enabled [system.input.conf](https://github.com/kokuwaio/helm-charts/blob/fluentd-elasticsearch-10.2.1/charts/fluentd-elasticsearch/templates/configmaps.yaml#L191) in fluentd and it contains a lot of inputs that are tailing files that are non-existant on the host. As the paths don't...