Mo Khan
Mo Khan
/lifecycle frozen
/milestone clear
I do not see how this would work. Per the [docs](https://github.com/kubernetes/kubernetes/blob/72acaad83924360960e21915aa94cd1db8d0196c/staging/src/k8s.io/api/core/v1/types.go#L6266-L6272): ```go // stringData allows specifying non-binary secret data in string form. // It is provided as a write-only input...
> what options do we have then? drupal is not the only one, also opensearch for example, requires to pass an entire yml config file as a secret.. and as...
> > > what options do we have then? drupal is not the only one, also opensearch for example, requires to pass an entire yml config file as a secret.....
> the problem is NOT creating a secret and attacching to the pod, the problem is that secret is NOT encrypted, is only encoded. using the secrets-store-csi-driver i can put...
Curious if we have any desire to support [CEL](https://github.com/google/cel-spec) here (maybe instead of JSON path). CEL is used by Kubernetes in a few places now, and the list is growing.
This is a breaking change since the existing behavior only requires that the annotation be set at all, not the specific value it has. At most, we can update the...
@salaxander only https://github.com/kubernetes/kubernetes/pull/113218 is targeting v1.27. https://github.com/kubernetes/kubernetes/pull/113374 will wait until v1.28 (while the PRs are for the same overall KEP, each PR has a different feature gate / functionality).