Tobias Florek

I disagree. Without the possibility to set multiple users it's not easily possible to, say, have a template generate an application, consisting of a database pod, a management pod and...

I do think it is necessary. The original problem is still there and will not be going away. Using non-root uid is strictly more secure than using user namespaces, and...

Argh. I forgot to copy paste correctly! I meant --subuidname. Sorry for the mistake.

Right, but in the host's net namespace.

Are you using the dnsname plugin? Because AFAICT the dnsname plugin sets the nameserver to the bridge's gateway address (because that's where it instructs dnsmasq to listen).

Dnsname configures a dnsmasq server to listen on the bridge gateway address (on the host). It correctly configures resolv.conf to point to that nameserver when used without using user namespaces....

I have a core file, if someone is interested. It will only stay up for the next few days though. https://send.firefox.com/download/5a2c462c6be5cc01/#ENKEY7c1f7RdQp5vuRTATQ

Hi! It looks as if it's because of glob's [max_depth(1) call](https://github.com/killercup/quicli/blob/b2b2ebc5ecde0fb361395d9ff050378b99072698/src/fs.rs#L95). Removing allows the following (previously non-working) patterns with subdirectories (`"dir/file"`, `"*/file"` and `"**/file"`). It does find files in subdirectories...

Shouldn't the memory settings come from the resource limits? Java is pretty good in obeying them when configured accordingly.

The recommendation is not applicable to Kubernetes, because without additional config, kubernetes will just schedule other work on the node and opensearch nodes will get starved if configured as if...