Dave Protasowski
Dave Protasowski
cc @evankanderson for input Curious if you have thoughts about the tension here where if we enable this by default it will break a lot of existing deployments and require...
Following up on Evan's feedback - we can make `secure-pod-defaults` an enum - `Disabled` - do nothing - `Enabled` - enable most options but it still works with non-root images...
/triage accepted What I observed: When creating the new Knative service 1. The number of initial pods was correct (matches initial-scale) 2. The autoscaler immediately scaled down to one pod...
@diarmuidie following up are you affected by the current behaviour? We've done the documentation but it does not mean we shouldn't change it to be more 'intuitive' obvious.
> Otherwise, resolution should be left to the CRI runtime, which may even use a different transport or credentials than available to knative. For context we want to bake the...
/triage needs-user-input
> I will resist the urge to diverge the thread why this isn't a separate concern :-) > Understanding that knative wants to do this, there is information available for...
@nicks can we move the struct into a k8s-sigs repo or something?
@nicks did that struct go any central spot? cc @BenTheElder
> decided it would not be worthwhile to create a repo for this. it's even in the non-goals section of the KEP! 😂 That seems backwards - what if the...