Kevin McDermott

> When the Shibboleth is configured with OpenLDAP in versions prior to 2.8.4, the secret configuration is incorrect, admins will be unable to search for users in the OpenLDAP server,...

## Validation Template ## What was fixed, or what change has occurred Failing to connect to upstream Azure endpoints will get a better error message. ## Areas or cases that...

@raulcabello Yeah, we are a fair bit behind, and it would require more rework to bring it up-to-date, when it's getting removed for 2.9.

My view is that we should see what it spits out, and discuss **as a group** what it means.

We should be able to parse it from the Secret, without much additional cost.

How are you configuring your Kubernetes to handle this? We have kept to the same nomenclature and functionality as described here https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/ But that's no reason we couldn't do something...

Ahh...right, that is kinda what I expected, and yes, I can see that it's annoying. I was wondering if you'd avoided the `kubectl auth can-i ...` bit because for most...

Hi @evandam This isn't something we're going to get to any time soon, as I indicated above, I'd be happy to look at PRs, but this does feel like a...

Hi @evandam This is the doc for "no-auth" https://docs.gitops.weave.works/docs/guides/anonymous-access/index.html Sorry, this should be linked from the guides, and I'll open a PR to address this. I will dig into this...

There are two issues: 1. We should document _why_ those perms are right 2. We should document _why_ you might not want them At least in this case, this is...