Don Bowman

DNS tries to resolve kube-spawn... to external + root nameserver

2

Somewhere there is a hardcoded 8.8.8.8 (because this is not my machines DNS). I am seeing an A-record lookup for kube-spawn-...worker (no domain). This goes to 8.8.8.8. This is then...

Assumed values for hashsize and nf_conntrack_max

1

This is part of the theme of assuming we know better than how the host is configured. the code writes the value of 131072 to /sys/module/nf_conntrack/parameters/hashsize. It then checks that...

Incorrect assumption that overlayfs is only docker storage driver

4

https://github.com/kinvolk/kube-spawn/pull/301#discussion_r211939630 in pkg/bootstrap/node.go we have function ensureOverlayfs(). However, users may be using e.g. [devicemapper](https://docs.docker.com/storage/storagedriver/device-mapper-driver/) driver for docker. I personally don't believe these system checks belong in this tool, its too...

Several issues: a) ignores ip6tables b) this silently breaks the firewall of the host its on My host has iptables -P FORWARD drop, after I run kube-spawn, without knowing, I'm...

Incorrect assumptions about 'machines.raw'

1

Recent commit assumes that /var/lib/machines is loopback mounted onto /var/lib/machines.raw. But many people will have /var/lib/machines as its own btrfs partition: ``` mount|grep machin /dev/mapper/btrfs-machines on /var/lib/machines type btrfs (rw,relatime,ssd,space_cache,subvolid=5,subvol=/)...

fix: add TimeoutError handling in get_connection()

6

### Pull Request check-list _Please make sure to review and check all of these items:_ - [x] Does `$ tox` pass with this change (including linting)? - [x] Does travis...

npm audit was showing quite a few (10 high, 63 derived) known security flaws, unknown how many actually affected this codebase (since some where only in dev). Signed-off-by: Don Bowman

Undefined array key "admin_id" in submissions/entries.php on line 11"

1

installed, form works in the sense that it sends an email, displays. but, it gets a 500 back from the server, indicating Undefined array key "admin_id" in submissions/entries.php on line...

https://github.com/cockroachdb/cockroach/issues/9682 suggests cockroachdb does not support `CREATE UNIQUE INDEX "index_users_on_login" ON "users" (LOWER("login"))` need to find some way to filter this in the adapter.

https://github.com/cockroachdb/cockroach/issues/32098 shows that Cockroachdb does not support timestamp precision (limit). The most obvious workaround is to create the schema without a limit, e.g. remove the (#) from timestamp field on...