Justinas

Kubernetes Auth Method for Vault authentication

3

At the moment `boundary` workers can authenticate with Vault only using `token` method (https://www.boundaryproject.io/docs/concepts/domain-model/credential-stores), which needs to be manually deployed. However, in cases when `boundary` workers are running on kubernetes,...

Include username and password into templated values when integration with Vault is used

2

When using built-in client with `boundary connect`, for example `postgres`, at the moment only following placeholders are supported (https://github.com/hashicorp/boundary/blob/248e1f36b5ed3ed24a0ec92e47a2de70fdb5b4ef/website/content/docs/getting-started/connect-to-target.mdx#built-in-vs-exec): - `{{boundary.ip}}` (BOUNDARY_PROXIED_IP): The IP address of the listening socket that...

Hey! In documentation there is a reference to `kube` wrapper which could be used with `boundary connect` (https://github.com/hashicorp/boundary/blob/main/website/content/docs/getting-started/connect-to-target.mdx#built-in-vs-exec), but there are no examples or guides how this could be used...

When using `--extra-user-header-client-ip` argument `kube-oidc-proxy` is unable to impersonate resource `userextras/remote-client-ip` with following error: ``` { "kind": "Status", "apiVersion": "v1", "metadata": { }, "status": "Failure", "message": "userextras.authentication.k8s.io \"10.251.176.235:50924\" is forbidden:...

Allow tailing directory instead of specific file

3

It would be very handy to have functionality which would allow to tail whole directory, instead of file which has to be explicitly provided. For example: ``` annotations: tailing-sidecar: tail:logs:/var/log/audit/**/*;...

Documentation links on istiod helm chart values are not valid anymore

1

Documentation links on istiod helm chart values are not valid anymore for `chartsidecarInjectorWebhook`: https://github.com/istio/istio/blob/d841018fa8b91f8542a13d0b50f4ef1a361573ef/manifests/charts/istio-control/istio-discovery/values.yaml#L91 https://istio.io/docs/setup/kubernetes/additional-setup/sidecar-injection/#more-control-adding-exceptions page does not contain any information about `neverInjectSelector` and `alwaysInjectSelector`

Cannot authenticate agains proxmox when using username and password

4

/kind bug **What steps did you take and what happened:** I am using below variables to generate manifests: ``` export PROXMOX_URL="https://pve.mydomain.net/api2/json" export PROXMOX_PASSWORD='MyPa$$w0rd' export PROXMOX_USERNAME='[email protected]' ... clusterctl generate cluster capi-mgmt...

Ciliums CRS causis capmox to panic

1

**What steps did you take and what happened:** If i use `--flavor cilium` when generating new cluster, `ProxmoxMachineTemplate` resources get misconfigured: ``` ❯ clusterctl generate cluster mgmt --flavor cilium --infrastructure...

feat(helm): adding property to define annotations on external service that would enable integration with external-dns

2

adding property to define annotations on external service that would enable integration with external-dns