Richard Hagen

protip from @sondresjolyst :D We shoud use `always()` Instead of `!cancelled()` when closing firewalls https://github.com/equinor/radix-platform/blob/198d1013778d21fab3ea0315f863a1df8924dac6/.github/workflows/aksplan.yaml#L112 Current: ``` if: ${{ steps.update_firewall.outcome == 'success' && !cancelled()}} # Always run this step even...

Remove hardcoded and predefined ingress ips, and always let azure assign a new IP for each new cluster Remove "RADIX_INGRESS_IPS" from web-console about page

Process to warn about expiry and rotate secrets for radix<env>app registry

2

Hot fix for Playground and Dev: > I manually rotated the secrets for playground and dev: > 1. Generate new password (I generated new password2) for the `radix-app-registry-secret-ENV` token in...

Forslag: Periodisk gå over listen over disconnected private links, og fjerne all ved hjelp av terraform: - Fjern relevante lenker fra https://github.com/equinor/radix/blob/main/terraform/config/platform.yaml - Kjør terraform apply (som da vil slette...

This was added for compatibility with Cert-Manager, but should not be needed any more. (Fixed in https://github.com/kubernetes/ingress-nginx/pull/13798) Ref: https://cert-manager.io/docs/releases/release-notes/release-notes-1.18/#option-2-disable-the-strict-validate-path-type-option-in-ingress-nginx ``` strict-validate-path-type: "false" ```

Currently Grafana shows statistics for radix-api, radix-web-console and radix-github-webhook, and sends alert if something is broken. These will need to be migrated to custom alerts/dashboards if they are installed as...

- Install envoy gateway as a secondary ingress class - Configure a oauth2proxy and test it as a middleware (https://github.com/envoyproxy/gateway/issues/5705) - Create 5.000 ingresses, and set up a long running...