Tommy McNeely

blacklist sounds good, but realistically, secrets shouldn't be in values (not saying that we comply with that yet) ;)

The userparameters.pp appears to have a mechanism built-in to deploy a script, but it wants to put them in /usr/bin by default (ugh). I think it would be "a good...

Actually, I am wondering if we should look into using the paths defined by selinux (RHEL at least) ``` ~> semanage fcontext -l | grep zabbix_script_exec /usr/lib/zabbix/externalscripts(/.*)? all files system_u:object_r:zabbix_script_exec_t:s0...

OK, so we will need OS level hieradata... of course red hat packages aren't going to be in /usr/local, hence the /var/lib/zabbix (more redhat'y) :)

@vinzent - MySQL is the most common example, when trying to use Galera Cluster. If you just "remove" the mysql module, then each time the selinux packages are updated, they...

We had issues with the "mysql" and "rsync" modules, come to think of it, cause Galera tries to run rsync on a "non-standard" port. CentOS 6 supports disabled modules as...

For what its worth they no longer include the ojdbc driver, even in the tar version. It's really too bad it can't automatically look in like $JIRA_HOME/lib for jars :-/...

@adamcrews Do you still have any of this code? The ojdbc8.jar is not (no longer) distributed with JIRA, even in the "tar" distribution. It might be nice to have some...

Additionally, when using a GKE Ingress, it has to model the health checks from the readiness probe, and since it is using an "exec" instead of httpGet, they can't model...

I thought I would be clever and just send my "current" branch in, but it "helpfully" detects that I am in a merge request, and doesn't tell me the proposed...