Anand Nayak

How do i get the root cert expiry metrics if manual issuer?

2

I am using cert-manager and istio-csr for certificate management, I use manual root certs to create intermediate certs using cert-mnager , I am able to get istiod and intermediate cert...

Ingress gateways rolling restart causes websocket closure.

1

### Bug Description We have desktop app connecting from a browser to backed pods . Something like browser(client) --> ingress-gateway--> app pods . When i do ingress gateway/app rolling restart...

ssh not working using password.

1

I am able to do ssh using the password, But not using the go code. > username = "xxxxxxx" passwords = []string{"026aaa9f-01fa-0850-095c-3d3daa0a4bd3", "4e58232c-2b79-cf4b-5e98-2bd6f0ba4946"} fmt.Println(bastiondc) fmt.Println(dchost) easyconfig := &easyssh.MakeConfig{ User: username,...

Istio-csr pods were hung unable to handle request causes entire cluster downtime for new pods/expired pods.

5

We are running with cert-manager-istio-csr 2 pods , one pods was hung at ``` 2022-03-24T18:59:47.311227Z info klog tls-provider "msg"="renewing serving certificate" 2022-03-24T18:59:47.556644Z info klog tls-provider "msg"="serving certificate ready" 2022-03-24T18:59:47.556869Z info...

 We observed issue related to throttling, If we could get a option to reconfigure these parameter that would be helpful . ``` 2022-03-29T07:38:49.737428Z info klog Waited for 3.159691468s due...

metrics to check certificate expiry for istio workloads ?

1

s there any metrics get cert exipry for istio workloads ? I can only get the istiod and rootCA/intermedia CA from the certmanager_certificate_expiration_timestamp_seconds metric.

Support for oauth2-proxy frontend?

8

https://github.com/oauth2-proxy/oauth2-proxy is widely used in many projects , Which intern sets some header along Authorization bearer token , Can the homer be supported with id_token ?

CRD does not show the output like kubectl

8

### What happened? We use flinkApplication operator , which shows the output status using kubectl like this ``` k get flinkApplication -A NAMESPACE NAME PHASE CLUSTER HEALTH JOB HEALTH JOB...

Seeing intermittent 503 connection reset error on both ingress gateway and sidecar

10

### Is this the right place to submit this? - [X] This is not a security vulnerability or a crashing bug - [X] This is not a question about how...

Kiali does not honour the OIDC groups

14

We use the OIDC groups for authenticating/Authorising the kubernetes resource access. Something like _([jmazzitelli] I edited to use the proper triple-tick marks for proper yaml formatting)_ ```yaml apiVersion: rbac.authorization.k8s.io/v1 kind:...