André Arnqvist

> > We solved this by configuring the container runtime, as opposed to the `apps` layer: https://elastisys.io/compliantkubernetes/operator-manual/air-gapped-environment/#migrating-images-manually > > Is this issue still relevant? > > @aarnq feel free to...

Do your changes depend on rw/np-sec or could you rebase on main and remove all other commits? Currently the diff includes changes already merged to main.

> > Do your changes depend on rw/np-sec or could you rebase on main and remove all other commits? Currently the diff includes changes already merged to main. > >...

I don't see the point of having netpols for calico-accountant and node-local-dns since they use the host network, and regular Kubernetes netpols don't apply to the host network.

1. Seems like the replication factor is currently broken when using separate routing and ingesting receivers, but it is fixed in newer versions of the chart. 2. The replication factor...

Surprisingly the memory usage of my receivers have been lower in total compared to the previous setup, although the network usage of all instances have been a lot higher and...

It would be great if there is a possibility to try to rerun or increase the timeout for Kubespray, or for the individual steps in Kubespray to reduce these types...

We also have issues at the terraform step sometimes: ```console Error: API error ParamError 431 (ServerAPIException 9999): Internal error. It might be temporary, try again later and/or contact if it...

I kind of want to expand even further and try to modularise some of our releases where possible, especially `kube-prometheus-stack` since it takes a really long time to apply and...

Yeah, I was thinking in those lines as well and then those could be moved to bootstrap, but I think we will loose the validation in that case. But for...