Shingo Omura

Thanks for the info. > I don't think this change affects this KEP, but please confirm. Confirmed. IIUC, the issue is caused by container runtimes not duplicating the primary group...

/remove-lifecycle stale

@SergeyKanzhelev Yes, I will continue working on this KEP. As I wrote in https://github.com/kubernetes/enhancements/pull/3620#issuecomment-1500728236 , my cleanup PR in containerd took much time to merge than I expected.

Memo: Tasklist to alpha(v1.28) - [ ] implement `SupplementalGroupsPolicy` in k/k (incl. updating cri-api) - [ ] implement cri-api's `SupplementalGroupsPolicy` in containerd - [ ] release containerd with cri-api's `SupplementalGroupsPolicy`...

> When using the [`RemoteForward`](https://manpages.debian.org/bullseye/openssh-client/ssh_config.5.en.html#RemoteForward) with a Unix domain socket This is widely used in forwarding gpg-agent. This feature is required when signing git commits in remote server by using...

Hi, I'm devloping/operating an in-house ML platform on the top of EKS clusters and now providing "CSI for Amazon FSx for Lustre" as a high-throughput cache for users to read...

This issue can be solved by using https://github.com/pfnet-research/meta-fuse-csi-plugin

> @everpeace What are the advantages of introducing --apiserver-advertise-address/--apiserver-bind-port? I think just similarity to kubeadm which is one of de-facto tools in setting up kubernetes.

> But that doesn't seem to be necessary right now, what do you think? agreed.

https://github.com/kubernetes-sigs/controller-runtime/pull/2664#issuecomment-2112618194 gave dismissive feedback, unfortunately. This means, my PR would not be merged into container-runtime. So, let me to put authorization webhook implementation inside of karmada.