Andrei Kvapil comments

Results 629 comments of


                                            Andrei Kvapil

[kubernetes] Pre-install NVIDIA GPU Driver

There is still some issues with driver load. It does not work with `gpuOperator.valuesOverride.gpu-operator.driver.enabled=false`: ```console # k logs -n cozy-gpu-operator nvidia-container-toolkit-daemonset-4h9xn -f driver-validation time="2025-04-24T07:21:03Z" level=info msg="version: b5479aaa-amd64, commit: b5479aa" time="2025-04-24T07:21:03Z"...

Fix: Correctly assign unique memory addresses for EndpointSlice ports in reconcileByAddressType

/assign @qinqon

Fix: Correctly assign unique memory addresses for EndpointSlice ports in reconcileByAddressType

sure, rebased

Security point: Anonymous user has RoleBinding

I think this is inteded behavior of kubernetes cluster, we don't mange this rolebinding from cozystack side

Security point: Anonymous user has RoleBinding

For more info please refer to Kubernetes documentation https://kubernetes.io/docs/reference/access-authn-authz/rbac/#discovery-roles

Enable automatic OIDC integration for created kubernetes cluster

Totally makes sense, we'll consider the implementation.

Enable automatic OIDC integration for created kubernetes cluster

To implement this we need to add extra options `--oicd-*` into KamajiControlPlane resource https://github.com/aenix-io/cozystack/blob/1a88883a3b1dc5c4ac69f100501f982b86d02159/packages/apps/kubernetes/templates/cluster.yaml#L95-L128

Enable automatic OIDC integration for created kubernetes cluster

This is still on a row

Introduce bats testing framework

closed in favor #982

[BUG] Unable to start on Talos Linux

Hey, I found there is a problem with caps: **ovs-vswitchd** ```console # getcap /usr/lib/openvswitch-switch/ovs-vswitchd /usr/lib/openvswitch-switch/ovs-vswitchd cap_net_bind_service,cap_net_admin,cap_sys_module,cap_sys_admin=eip ``` Talos Linux restricts to run any binary with `cap_sys_module` **iptables** ```console # getcap...