Lauri Võsandi

Hello, could you please describe a usecase for this? How do you imagine receiving CSR-s in that case?

So you're saying you want to publish certificates issued to a particular user under the userCertificate attribute?

This should be doable with one constraint - Certidude should not remove other certificates issued by some other CA. I have currently Estonian ID-card certificates attached to the user for...

Just please use `Remote-User` header passed by proxy like Authelia does it

I agree recommending to use `sponge` is not the best option here, even simple `.... > blah.prom.part; mv blah.prom.part blah.prom` is better option

Please do NOT recommend ReadWriteMany as solution, this implies the application is actually designed to handle multiple processes writing into the same filesystem. At best it will work without issues,...

@ywk253100 can you confirm that jobservice and registry behaviour remains correct with ReadWriteMany access mode? (That is multiple pods writing to the same shared filesystem eg NFS) Sure they *can*...

Note that when running on Longhorn you can't actually use ReadWriteMany access mode because Longhorn volume can be mounted at time only on one worker node

I concur -- this image is suboptimal for Kubernetes deployment. @ath88 have you found a suitable alternative or should we just create another image from scratch?

Hi, just to chip in with discussion: In addition to time based retention please add disk size based retention so whatever PV gets allocated to Zinc it will maximally use...