Etai Lev Ran
Etai Lev Ran
Since we're moving to use of SDS, these flags should be added to the *control plane* and communicated to the data plane over SDS on updates. The `--cacert` CLI flag...
> 1. There is currently no way to get the attributes of the requesting workload on the remote service side. We only know the name of the requesting peer. This...
Related to #412?
an alternative may be to have an operator listening to changes in the k8s API *or* xDS and then "replicating" the intended to the relevant environment. CC: @praveingk
Not sure I understand what k3s would be used for? Just managing the control plane or the entire runtime, incl data plane? What about user workloads?
@aviweit
Not sure we want vulnerabilities reported as normal issues. Need to research what options are available so they can be fixed before disclosed publicly (e.g., maintainers mailing list)
Enabled private vulnerability reporting on the repo. Revised SECURITY.md text to reflect that.
Possibly related to #557? Seems to leave residual services also not after crashing?