Adrian Berger

It seems that setting `-Xmx` alone doesn't work here, because the container sees over 130GB available which will be used for everything outside of the heap: ``` ava -Xmx400m -XX:+PrintFlagsFinal...

Update: Issue has been solved with `-XX:MaxRAM=500m`: 

@nimrodkor I would rather check if `gosu` is **in** `CMD` or `ENTRYPOINT`, despite the location (first, middle, last etc.). `USER gosu` would not be correct, because `gosu` is the command...

> @adberger Right. However, how would you know `gosu` is a user and not the app / executable / command? You could parse it according to the [gosu usage](https://github.com/tianon/gosu#gosu): `Usage:...

@nimrodkor I prepared some changes in my forked repository, which is currently under review by my colleagues: https://github.com/adberger/checkov

@stefanprodan How could an implementation of this look like when using Grafana Annotations? The summary field doesn't seem to be attached in https://github.com/fsequeira1/notification-controller/blob/main/internal/notifier/grafana.go or am I'm missing something? Would be...

This is a good start :) @prometherion any updates on this?

> what do you think about using https://github.com/kubernetes/kube-state-metrics/blob/main/docs/customresourcestate-metrics.md? It allows to add custom metrics based on fields in CRD without a need to modify code Solved according to your suggestion,...

Solved with https://github.com/kubernetes/kube-state-metrics/blob/main/docs/customresourcestate-metrics.md Example with kube-prometheus-stack Helm Chart (https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack): ``` kube-state-metrics: rbac: extraRules: - apiGroups: [ "capsule.clastix.io" ] resources: ["tenants"] verbs: [ "list", "watch" ] customResourceState: enabled: true config: spec:...

@prometherion Sorry, I currently don't have any intention to make a contribution to the documentation of capsule because I'm quite busy at the moment.