Andreas Kupries

The global role validator changes came from - https://github.com/rancher/webhook/commit/b18c38740a52623e44539f7b5ed6eb02c2f53306 - I.e. https://github.com/rancher/webhook/pull/309

Back to `In Progress`. While the PR got the requisite approvals a comment pointed to integration tests not seen, which should be extended as well.

Info from the referenced PR: > 1. Extended `AuthConfig`, `SamlConfig` with the proposed flags about SLO (`supported`, `enabled`, `forced`). 1. Based on the CRD setup the `supported` flag might be...

Relevant upstream releases: |Job|Release| |---|---| |garden|https://github.com/cloudfoundry/garden-runc-release/tree/develop/jobs/garden| |cflinuxfs3-roots-setup|https://github.com/cloudfoundry/cflinuxfs3-release/tree/master/jobs/cflinuxfs3-rootfs-setup| |rep|https://github.com/cloudfoundry/diego-release/tree/develop/jobs/rep| Versions currently used by kubecf (cf-deployment 12.18): |Release|Version|Hash| |---|---|---| |garden-runc-release|1.19.9|1c678e1c7a3506c0e408860571560081c15e3c6d| |cflinuxfs3-release|0.150.0|6421766b2120009c6d422c4b1ed5a12c4290eda4| |diego-release|2.41.0|8a183683f26ba982eda1dbeba7f55edc9a1059b0|

Commits to branch the PRs from (Using the version tags from previous comment): |Release|Commit|Reasons for patching| |---|---|---| |garden-runc-release|https://github.com/cloudfoundry/garden-runc-release/tree/e1d3a70ebfc7151cd0f38433fe0ab5ce86f2103a|post-start: `curl`s unix socket support to variable, switched to `netcat` as more stable|...

@fargozhu This ticket about the diego-cell patches is not listing the patches ``` bosh/releases/pre_render_scripts/diego-cell/garden/jobs/patch_pre-start.sh bosh/releases/pre_render_scripts/diego-cell/rep/jobs/patch_rep_ctl.sh ``` Was this intentional ? - The `pre-start` patch does permission changes/fixes. - The `rep_ctl`...

Open question: - Should I do a PR directly on the target repos ? - PR from personal fork ? - PR from SUSE fork ?

Resolutions (Talked with @f0rmiga): - Personal forks. - Make changes, push personal, final discussion about upstreaming - `shared-packages` vs `packages` - definitely not right now. - Look into new properties...

garden-runc = commit https://github.com/andreas-kupries/garden-runc-release/commit/34807fd91b2a6c1f1cd0f3b57e9b3c58aa50f9bb Original patch: https://github.com/cloudfoundry-incubator/kubecf/blob/master/bosh/releases/pre_render_scripts/diego-cell/garden/jobs/patch_post-start.sh

cflinuxfs3 = commit https://github.com/andreas-kupries/cflinuxfs3-release/commit/f61fc8368ca6c767044e9756cb14e0ee565c36d1 Original patch: https://github.com/cloudfoundry-incubator/kubecf/blob/master/bosh/releases/pre_render_scripts/diego-cell/cflinuxfs3-rootfs-setup/jobs/patch_pre-start.sh