Edwin Buck

@wt Typically the direct ssh in as root is not meaningfully more secure; because, all sudo commands can be logged to audit files, which on very secure systems, are not...

Redirecting standard error out of the awk command is the right thing to do. We need to probably process STDERR in the long run, but at least this prevents it...

Options 1 and 2 may solve a pain point, but it still does unnecessary work of loading non-changed entries. The only difference is the policy on how frequently the cache...

@evan2645 Can you offer some visibility here? You're the original author of the issue, and if it was an idea without an implementation, that would be useful to know. If...

Mentioning #4985 as this may be a blocker. There's been two additional changes in event cache proposed in PRs, can we verify if those address some / all of the...

@faisal-memon and I have been discussing various solutions. *** Faisal prefers a solution where we don't process entries more than once. To implement this, he proposed a skipped_entry list. This...

@faisal-memon would you do a Merge Request for your branch, and if it is incomplete, please mark it as in-progress?

This is most likely the last issue open that blocks #4985

blocks #4985

> The [algorithm](https://github.com/spiffe/spire/issues/5021#issuecomment-2046143622) posted above will work great for covering skipped events during the polling loop. It doesn't cover the case of a server restart when there is a skipped...