Lauri Võsandi

Many (most) OIDC clients will need user object to exist before API calls can be performed with the user account. Some software solutions include SCIM user provisioning, see [here](https://learn.microsoft.com/en-us/entra/identity/app-provisioning/use-scim-to-provision-users-and-groups) how...

One aspect is keeping only `spec` section instead of the whole manifest and other aspect is using `Job` istead of `Pod` as Kube scheduler will itself retry jobs and there...

Better handling of master failover

2

It looks like most applications do have Redis reconnect support if Redis operation results in error such as `ReplyError: READONLY You can't write against a read only replica`. In fact...

Additional Service definitions

1

CloudNativePG adds three different Kubernetes `Service` resources, I would advise doing something similar: - `-rw` which corresponds to master - `-ro` which correspond to slaves - `-r` which corresponds to...

ImageVolume broken

2

**Environmental Info:** K3s Version: k3s version v1.31.0+k3s1 (34be6d96) go version go1.22.5 Node(s) CPU architecture, OS, and Version: Linux kubetest 6.8.0-44-generic #44-Ubuntu SMP PREEMPT_DYNAMIC Tue Aug 13 13:35:26 UTC 2024 x86_64...

**Luet version:** ``` luet version 0.32.5-gd5d21653d7313ff396c0511af402834c89974ee3 2022-06-07 ``` **CPU architecture, OS, and Version:** ``` Linux zzz 6.8.0-45-generic #45-Ubuntu SMP PREEMPT_DYNAMIC Fri Aug 30 12:02:04 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux...