Graeme Lawes

My original example was a k3s cluster with an external CNI (calico), so I don't think the k3s-specific CNI dir was the issue. I do **not** disable `network-policy` at the...

I was mistaken, my k3s `config.yaml` does in fact have `disable-network-policy: true`, so that's not the issue: ``` ubuntu@pi01:~$ sudo cat /etc/rancher/k3s/config.yaml --- cluster-cidr: 10.100.0.0/16 disable: - servicelb - traefik...

``` $ kubectl -n istio-system exec -it istio-cni-node-xjqj7 -- bash root@pi02:/opt/cni/bin# which -a iptables /usr/sbin/iptables /sbin/iptables root@pi02:/opt/cni/bin# ls -lah /usr/sbin/iptables /sbin/iptables lrwxrwxrwx 1 root root 26 Mar 28 19:05 /sbin/iptables...

And I am using `1.21.1` everywhere (helm charts): ``` $ helm ls --all-namespaces | grep istio | grep -v istio-prometheus-crs istio-base istio-system 1 2024-04-16 23:58:42.397900198 -0400 EDT deployed base-1.21.1 1.21.1...

Yeah, I fully control the cluster (k3s on raspberry pis I own). ``` ubuntu@pi01:~$ sudo ls -lah /var/run/netns total 0 drwxr-xr-x 2 root root 140 Apr 17 04:00 . drwxr-xr-x...

For repro purposes, here's more info on my setup, in case any of it helps: K3s configured with this ansible role: https://github.com/PyratLabs/ansible-role-k3s k3s server config (single control plane server `pi01`):...

Would this effectively be a monolithic deployment if it was configured with just 1 replica?

I'm getting this on a stable install of `bazzite-deck-gnome`

Yes

Not only does java use a different Trust Store mechanism (which is sometimes tied to the distro's trust store), but different distros use different CA trust store configurations and different...