Santtu Pajukanta

SECURITY: Privilege separation for archive_command & other Barman functions

2

Consider a common setup where user `postgres` on `pg` runs a PostgreSQL server and `barman` on `backup` runs Barman, and `postgres@pg` has passwordless SSH pubkey access to `barman@backup` to perform...

Kontena 1.4 certificates migrated from pre-1.4 vault secret certificates are incorrectly formatted and cannot be used in kontena/lb

6

See this gist, from `kontena container inspect`ing one of my LB containers: https://gist.github.com/japsu/a9120c9aea1b47d893ae535b0b26c3d0 `SSL_CERT_wiki.leonidasoy.fi` is `dns-01`, `SSL_CERT_grafana.plat2.leonidasoy.fi` is `tls-sni-01`. In the latter, notice the absence of line breaks between the...

Co-operate with formats that use tags of their own such as CloudFormation

3

CloudFormation has its own functions such as `!Subst` and `!Join` etc. In order to be able to input and output CloudFormation templates, Emrichen needs a way to co-operate with foreign...

`!Lookup` does not enrich on the fly

3

Template: ```yaml !Defaults x: y: 5 z: !Var x --- workie: !Lookup x.y no_workie: !Lookup z.y ``` Expected output: ```yaml workie: 5 no_workie: 5 ``` Actual output: ```yaml Traceback (most...

@akx Could you please comment on corner cases found in `tests/test_typeconv.py` and other corner cases you could think of? Cc @lukeschlather

(com.aws.greengrass.Nucleus): Support downloading component artifacts from an S3 bucket on another account

4

**Feature Description** When a component artifact is downloaded from S3, the Nucleus first issues an `s3:GetBucketLocation` API call followed by `s3:GetObject`. `s3:GetObject` to a bucket on another AWS account can...

Implementation options: 1. There is the `event_log` application with the `Subscription` model. * Define `Entry` type `forms.response.created` and emit it in `createSurveyResponse` * Add `survey_filter` to `Subscription` and `survey` to...

Whenever dimensions and their values are accessed, they should by default only show public dimensions. For private dimensions, there should be a `includePrivate: true` or similar mechanism to ask for...

Currently in the GraphQL API there is the `signupLink` attribute that provides the undecorated URL to sign up to the program item, if any. However, we also have other forms...