Dex

cc @marccampbell

Questions so far for kots team: Does this get configured by a kots CLI flag? Or pulled from a configmap? Or set in kind: Application YAML? or kURL spec?

Hi @yujunz thanks for submitting an issue -- I think maybe `kind` and `apiVersion` were added to kustomize in the 2.x branch, and we're still on 1.0.x (I think `1.0.11`...

Gotcha, missed that change -- thanks @laverya

I think `ship update` and other headless workflows will automatically copy folders to `.bak` before overwriting. We can talk about doing this for headed installs too, but it means you...

Not opposed to that. I think `generated-by` is in line with the sort of `heritage: Tiller` stuff that pops up in server-side or client-side helm-produced manifests.

@laverya I did some more looking around, and I think we should still consider including the standard managed-by tag. Kustomize team uses it in their example like so: https://github.com/pst/multi-cluster-multi-tenant-kustomize/blob/master/bases/app/kustomization.yaml#L1-L5

This is an interesting request -- thank you! The different levels of namespace/cluster scoping definitely make sense to me. I know there's all kinds of Transformer tweaks and fixes that...

@zendril this is interesting. I just ran through your ship.yaml and was unable to reproduce this one. ```$ cat base/artifactory-ha/artifactory-binarystore.yaml apiVersion: v1 data: binarystore.xml: |- lots of XMLy goodness in...

This is a great question. I know @marccampbell probably has thought more about this than I have, but I know there is some initial support for using [sealed secrets](https://github.com/bitnami-labs/sealed-secrets). There's...