Shaked Klein Orbach

Probably legacy. Feel free to fork & pull request

@bmartinn > @Shaked can I assume you mean from security perspective, i.e. fixed user/pass list in the apiserver.conf ? Yes exactly! > If this is the case, I would suggest...

@bmartinn Yea it is the easiest I have found but I thought maybe you know another way I wasn't familiar with :) I don't mind forking it and submitting a...

I like the idea of controlling it via cli params, so that there won't be a need to create a new `values.yaml` file. However, the only thing with FlexVolume is...

@bmartinn I'm on it! So currently I have this: `helm template ./trains-server-chart --values ./trains-server-chart/values.yaml --set use_secrets_flexvolume=1 --set fv.secretRef=creds --set fv.usepodidentity=false --set fv.resourcegroup=stage-general --set fv.keyvaultname=test --set fv.keyvaultobjectnames="apiserver_conf;main_yaml" --set fv.keyvaultobjectaliases="apiserver.conf;main.yaml" --set fv.keyvaultobjecttypes="secret;secret"...

@bmartinn Sounds great. I have pushed my changes [here](https://github.com/Shaked/trains-server-k8s/commit/c3047bc54e3d42c36296b2f6a85a9b942dd8cea0). Is it enough for a PR? Thanks! Shaked

@bmartinn Great! I was thinking that it would be easier to differentiate between the template and the values. Ideally I would have put FlexVolume there as well, but it over...

> Thanks @Shaked , yes this does makes sense, and this is exactly what we would recommend setting up manually. Great, I'll create a PR for that. I guess it...

@bmartinn I have an update regarding the timeouts. Now I'm seeing other 50x errors, such as 502, 503 (504 disappeared for now). ## Looking into `nginx LB` shows: `ku default...

Hey @bmartinn > Regarding timeouts, our defaults are also 5min on all three connection types, and it seems stable on our setups... > The 50x error codes, I think, are...