haslersn
haslersn
The recommended deployment manifests (e.g. `kustomize/external-dns-deployment.yaml`) should add ``` securityContext: seccompProfile: type: RuntimeDefault ``` to the PodSpec in order to be compatible with the Restricted policy of [Pod Securiy Standards](https://kubernetes.io/docs/concepts/security/pod-security-standards/).
I think the title is self-explanatory. If not, then reach out to me, please.
## Feature Request As mentioned in https://github.com/NixOS/nixpkgs/pull/167836#issuecomment-1092607816, it would be nice for `talosctl` to have `--extra-uefi-search-paths` configurable via an environment variable, too. This way, OS package maintainers can create a...
Currently the [config reference](https://www.talos.dev/v1.0/reference/configuration/#config) just says that `persist` > Indicates whether to pull the machine config upon every boot. After discussion in Slack, it seems that a more appropriate description...
I've seen the following error in the logs of my Velero backups: ``` time="2022-07-21T04:22:03Z" level=error msg="Error executing hook" backup=velero/four-hourly-20220721041203 error="unable to upgrade connection: container not found (\"compute\")" hookPhase=pre hookSource=annotation hookType=exec...
We have Pods created by KubeVirt. KubeVirt automatically sets the following annotations: ``` post.hook.backup.velero.io/command: '["/usr/bin/virt-freezer", "--unfreeze", "--name", "dns01", "--namespace", "powerdns"]' post.hook.backup.velero.io/container: compute pre.hook.backup.velero.io/command: '["/usr/bin/virt-freezer", "--freeze", "--name", "dns01", "--namespace", "powerdns"]' pre.hook.backup.velero.io/container:...
Feature request: Support certificate rotation & backups without privilege escalation. According to [this documentation](https://github.com/zalando/postgres-operator/blob/3e275d122a54fbf17c40db9564f762ea0754b61c/docs/reference/operator_parameters.md#kubernetes-resources), enabling `spilo_allow_privilege_escalation` is required for certificate rotation & backups to work. However, this breaks those features...
**Is your feature request related to a problem? Please describe**: I accidentally deleted a DataVolume. The PersistentVolume was still there. I wanted to reuse it, including its content. However, containerized-data-importer...
I think that the command line interface for `nix-bundle` should be similar to `nix build`. That would improve learnability and usability. For reference, this is the output of `nix build...
On my system I currently cannot use the `nixpkgs/curl` container: ```bash $ docker run nixpkgs/curl curl https://nixos.org curl: (6) getaddrinfo() thread failed to start ``` Can you reproduce this, too,...