moffin

Our on-premise sentry instance is located on fourth-level subdomain (sentry.dev.example.com) behind Cloudflare CDN with SSL. Some strange things happen when using default HTTPTransport with raven-python. Cloudflare CDN responds with 403...

bdev_specs are not supported

1

Are you planning to support bdev_specs in python and go bindings? Because I think it stops many people from using official bindings.

Way to constrain only specific selectors

5

Is there a way to constrain only apps with specific selector? Right now kubearmor seems to add apparmor annotations to all pods, and the most granular constraint visibility is a...

Kubearmor does not enforce anything on pod's entrypoint or execs to kubernetes pods

1

## Bug Report **General Information** - Environment description kind k8s - Kernel version ``` Linux *** 6.5.0-27-generic #28~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Fri Mar 15 10:51:06 UTC 2 x86_64 x86_64 x86_64 GNU/Linux...

Tetragon is not showing process exec ancestors

5

### What happened? Tetragon version ``` time="2024-05-08T08:14:51Z" level=info msg="Starting tetragon" version=v1.0.3 time="2024-05-08T08:14:51Z" level=info msg="config settings" config="map[bpf-lib:/var/lib/tetragon/ btf: config-dir:/etc/tetragon/tetragon.conf.d/ cpuprofile: data-cache-size:1024 debug:false disable-kprobe-multi:false enable-export-aggregation:false enable-k8s-api:true enable-msg-handling-latency:false enable-pid-set-filter:false enable-pod-info:false enable-policy-filter:true enable-policy-filter-debug:false enable-process-ancestors:true...

Catboost static library contains all objects without exclude option

7

Problem: when building a static binary with grpc, "multiple symbol declarations" errors start appearing if linking against a static catboost library. The main reason is that catboost packs protobuf and...

C API thread_count parameter missing

3

Problem: We're trying to evaluate C API vs python for online inference. And C API does not have an analogous [thread count](https://github.com/catboost/catboost/blob/master/catboost/python-package/catboost/core.py#L2639) parameter. And there seem to be no documentation...

Problem: Sync is not implemented for model in Rust, which means for it to be used in tokio servers it has to be protected by a lock which degrades performance....

### What happened? I need to get all process_exec events (healthchecks and non-healthchecks) but that seems impossible, leaving out `{"health_check":true}` in deny filter seems to behave identical to setting it...