Dmitriy Kalinin

gke auth config-helper is hitting against too many open files

5

@andyshinn reported following error during `kapp deploy`. ``` Error: Listing schema.GroupVersionResource{Group:"certificates.k8s.io", Version:"v1beta1", Resource:"certificatesigningrequests"}, namespaced: false: Get https://x.x.x.x/apis/certificates.k8s.io/v1beta1/certificatesigningrequests?labelSelector=kapp.k14s.io%2Fapp%3D1565298894854176000: error executing access token command "/usr/local/Caskroom/google-cloud-sdk/latest/google-cloud-sdk/bin/gcloud config config-helper --format=json": err=pipe: too many open...

similar to what's shown in screenshot here: https://github.com/so-fancy/diff-so-fancy#screenshot

investigate kyverno post-deploy diff

1

**Describe the problem/challenge you have** After first deploy with below yaml, try changing audit => enforce and see diff on the next deploy. ``` apiVersion: kyverno.io/v1 kind: ClusterPolicy metadata: name:...

improve diff view of long string values

1

it would be pretty awesome to improve how we show diff for long string values, especially when they are wrapped in the terminal. for example ```diff --- update configmap/linkerd-config (v1)...

make resource annotations more resilient to being clobbered by external actors

3

per investigation with @jorgemoralespou, [tekton](https://tekton.dev/) copies over all annotations from Pipeline to PipelineRun resource. in our case both Pipeline and PipelineRun resources are being directly created by the user via...

support config rules for masking fields

4

when showing diffs (--diff-changes) some users want to be able to mask values of Secrets (v1/Secret). let's add diffFieldMaskRules to config: ```yaml apiVersion: kapp.k14s.io/v1alpha1 kind: Config diffFieldMaskRules: - path: [data]...

provide a builtin web ui to inspect an app

7

add a command (may be `kapp ui`?) that makes browsing through applications (exploring states of resources) a bit easier that doing it on the terminal

provide a way to add custom waiting functionality for resource types (or specific resources)

5

to support advanced waiting behaviour, possible implementations: - support an annotation that includes a starlark snippet (may be applies to specific resource vs all resource kinds); starlark code will have...

figure out better error/path-forward when user provides resource with uid/creationTimestamp filled in

1

currently kapp will panic due to use of ExistingResource() returning nil: https://github.com/k14s/kapp/blob/develop/pkg/kapp/clusterapply/changes_view.go#L115-L116

**Describe the problem/challenge you have** when deleting a CRD, k8s will initiate deletion of all of its instances. this may take time or even fail down the line. currently kapp...