Andrey Lebedev

Results 12 issues of Andrey Lebedev

### Issue N/A ### Description This PR addresses the HTTP2 Rapid Reset (CVE-2023-44487) by: - disabling HTTP2 for the webhook server until the CVE is fully addressed in [the standard...

needs-rebase
lifecycle/rotten
needs-ok-to-test
cncf-cla: yes
size/M

### Issue N/A ### Description Draft PR to gather opinions about adding a flag to enable different algorithms for the subnet selection from multiple qualified ones when they all come...

needs-rebase
needs-ok-to-test
do-not-merge/work-in-progress
size/L
cncf-cla: yes

Add support for the proxing to the upstream via a unix socket. This may help to reduce the number of the ports occupied by the POD which uses `kube-rbac-proxy` (e.g....

Currently the upstream can only be an URL to an http(s) endpoint which is bound to a network address and port. This would be nice to have a dedicated flag...

This PR follows up on a Dynamic Configuration Manager (DCM) gap identified during [the smoke test](https://github.com/openshift/cluster-ingress-operator/pull/1113#issuecomment-2315530761). When DCM is enabled by default, server management behavior changes. Not all servers will...

approved
jira/valid-reference

This PR shows what needs to be done in the router metric tests when the Dynamic Config Manager will be enabled. Xref: https://github.com/openshift/cluster-ingress-operator/pull/1113.

approved
do-not-merge/work-in-progress

Manual cherry-pick of https://github.com/openshift/api/pull/2178.

size/L
jira/valid-bug
jira/severity-critical
jira/valid-reference

This is a manual cherry pick of https://github.com/openshift/origin/pull/29784.

lgtm
qe-approved
jira/valid-bug
jira/severity-critical
jira/valid-reference

Draft PR to test 30 seconds timeout for HTTP client on HyperShift AKS.

approved
do-not-merge/work-in-progress
jira/invalid-bug
jira/valid-reference

I noticed that `github.com/aws/aws-sdk-go-v2/service/wafregional` package cannot create WAF Classic ACLs anymore reporting the following error: ``` WAFBadRequestException: AWS WAF Classic (v1) support will end on September 30, 2025. Effective May...