Beni Cherniavsky-Paskin

@grosser any opinion/advice? I see we can learn from your workarounds... - https://github.com/zendesk/samson/pull/2388/files#diff-cd8b4517098ba133e33da78bca46c6bdR14 — users also have to deal with os-level network errors. You also catch ECONNREFUSED there. And we...

Nice. Do you know what happens if you send dryRun param to older k8s that doesn't understand it? Does it error or silently performs a wet run 😰? Is there...

Right! Here's our similar code, also spliting on `/`: https://github.com/ManageIQ/manageiq-providers-openshift/blob/93009fcb167/app/models/manageiq/providers/openshift/container_manager_mixin.rb#L40-L52 1. Any idea if this can be backward compatible? 2. Does this interact with #208? I this would be a...

For anyone tackling this: the tests added in #457 are a good starting point. We should still support everything these tests cover, for compatibility. However, if it makes things easier,...

> What's not taken into account here is that refresh tokens are single-use. Interesting! Is that always true in OIDC? I'm now using Keycloak (in an non-kubernetes context) which I...

Ack. There are several risks (network cut off during renewal => locked out; several processes reading same token from file and all trying to renew & update the file might...

@grosser when you say "just stops" do you mean `.each { block... }` returns at some point? or keeps running but never calls the block? Which kubernetes version are you...

The answers in this discussion: https://github.com/kubernetes/website/pull/6540#discussion_r160742783 explain some things well. > Does anyone know if resourceVersion is unique to the kind, eg a v1/secret, or is it incrementing across all...

> I think (?) you can just start a watch without specifying resourceVersion, and then you'll only get changes after now? Nah, my bad, that would be too convenient to...

Can you show kubectl command to check this, and output with `kubectl --loglevel=8` (be sure to remove Authorization headers)?