Kyle Tarplee

feat: allow pushing an image by digest

2

When there are multiple images in the OCI directory the user can select the one you want by digest specifying it in the image reference (destination string). ## Testing Pull...

For example the following are possible in other tools - `kubectl --as=cluster-admin ...` - `helm --kube-as-user cluster-admin ...` - `k9s --as=cluster-admin ...` The benefits are outlined nicely [here](https://johnharris.io/2019/08/least-privilege-in-kubernetes-using-impersonation/) and the...

Support sharing GPUs

37

It would be useful to allow containers/pods to share GPUs (similar to a shared workstation) when desired. --- I have a fork of this device plugin that implements the above...

missing dependency on "thin"?

3

/usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in `require': cannot load such file -- thin (LoadError) from /usr/lib/ruby/1.9.1/rubygems/custom_require.rb:36:in`require' from /var/lib/gems/1.9.1/gems/backports-3.6.5/lib/backports/std_lib.rb:9:in `require_with_backports' from /var/lib/gems/1.9.1/gems/rack-1.6.4/lib/rack/handler/thin.rb:1:in`' from /var/lib/gems/1.9.1/gems/vegas-0.1.11/lib/vegas/runner.rb:295:in `setup_rack_handler' from /var/lib/gems/1.9.1/gems/vegas-0.1.11/lib/vegas/runner.rb:36:in`initialize' from /var/lib/gems/1.9.1/gems/beanstalkd_view-2.0.0/bin/beanstalkd_view:15:in `new' from /var/lib/gems/1.9.1/gems/beanstalkd_view-2.0.0/bin/beanstalkd_view:15:in`' from /usr/local/bin/beanstalkd_view:23:in `load' from...

Optionally support crane/docker style auth for greater compatibility

5

### What is the version of your ORAS CLI main ### What would you like to be added? I would like a flag called `--simple-auth`. If the flag is not...

--debug should redact Location headers

3

### What happened in your environment? Oras already redacts Set-Cookie and Authorization. It looks like Cookie is not done because no Cookie is ever set in a request (but might...

Controller should be optional

8

According to the CSI spec, the controller is actually optional. I would like a way to run the tests without assuming the controller exists. Only the NodeServer and IdentityServer are...

Anonymous blob mounting

4

For motivation and background see [this](https://opencontainers.org/posts/blog/2024-03-13-image-and-distribution-1-1/#anonymous-blob-mounts) From the [spec](https://github.com/opencontainers/distribution-spec/blob/main/spec.md#mounting-a-blob-from-another-repository) the `from` field is now optional when doing blob mounts. > The registry MAY treat the `from` parameter as optional, and...

https://github.com/int128/kubelogin/blob/fdcdcc3a60561d26957a43872f0bd997b160c424/pkg/infrastructure/mutex/mutex_test.go#L6 Consequently this allows you to take `golang.org/x/net` out of your `go.mod` file.

Access to identity provider behind SOCKS proxy

1

## Describe the question Is it possible to configure kubectl-oidc_login to use a SOCKS5 proxy when connecting to the `--oidc-issuer-url`? ## Rationale I have a Kubernetes cluster that is running...