Ryan Despres

There is some related errors when running keytool when setting up TLS such as putting certs in `/etc/x509/https`. Saw two different keytool errors: `keytool error: java.security.KeyStoreException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_SESSION_READ_ONLY` `keytool error:...

@erikdw I am having the same error even when I specify the nimbus host both in the conf file and as an argument in the storm command . this is...

@erikdw sorry I forgot to mention that I am running it in marathon using the run-marathon-script so doesn't that start Nimbus. If not how would I specify the configuration and...

@erikdw I got it to work by setting the STORM_NIMBUS_OPTS env in the json for the marathon application. However you have to just guess what machine IP node marathon will...

Hi, we actually need this for Trivy init container. when in offline environments we need an init container that downloads the vulnerability data base to the trivy container

Because of environment where it cannot download the database from the open internet, we use an init container to pull the database from S3 for example. I am not aware...

@kimxogus I realized this is missing the init container in the in the https://github.com/goharbor/harbor-helm/blob/main/templates/trivy/trivy-sts.yaml, any chance you can add it there as well?

In case anyone cares, this issue seems to be the same if using IMDSv2 when running harbor on EC2 instances and trying to use the instance role. Increased the hops...

Anyone have any update on this. Looks like we are waiting for distribution v3 to be released?

This has support for setting "Unmanaged Attributes" while 1028 doesn't (brief look). EDIT : My bad that is in realm_user_profile.go which you are talking about