Joe Bowbeer

@howardjohn wrote: > Mesh is blocked by [kubernetes-sigs/gateway-api#2873](https://github.com/kubernetes-sigs/gateway-api/pull/2873) IIUC, Your PR was merged and Mesh is now part of standard Gateway API Should Istio's Service Mesh Implementation Status be changed...

This needs a 1.0. None of the versions lower than one can be assumed to be compatible, so no hoisting is possible. _To help developers who rely on your code,...

A related question: How difficult would it be for Grafonnet to output DaRK resources?

With support for resource `action: get` another workaround is: ```yaml apiVersion: argoproj.io/v1alpha1 kind: WorkflowTemplate metadata: name: secret-extractor spec: entrypoint: main templates: - name: main inputs: parameters: - name: secretNamespace value:...

Is this recommendation wrt automountServiceAccountToken still valid: https://cert-manager.io/docs/installation/best-practice/

@ssivasankarrao I think some of your concerns have been addressed: * https://github.com/cert-manager/cert-manager/pull/4036 * https://github.com/cert-manager/cert-manager/pull/5259

@kharf writes: > In my opinion the HelmChart and the CRDs file have some options to improve. First the apiext deployment is included in the CRDs file and not the...

> This deployment also has no securityContext and resource requests, which our policies enforce, so we had to patch the CRDs file, which is something we don't want to do....

The first approach described here is my preferred solution: https://github.com/kyverno/kyverno/issues/2709#issuecomment-1033928805 > Enhance kyverno to understand the different authentication requirements for ECR registry. [...] This is what keel implements, for example,...

Once this is merged, I'll be interested to see what gaps (in existing vars functionality) remain to be filled. I created a discussion in hopes of clarifying the current deficits,...