Mario Manno

Kubewarden could be used to harden the Epinio installation. There is a catalog of policies over at https://kyverno.io/policies/?policytypes=validate As an operator or user of Epinio, which policies might I want?

Currently we don't limit the upload size, we could use https://pkg.go.dev/net/http#MaxBytesReader What values do we want to support, how big are apps, how much resources does our pod have (tmp...

Health checks for workloads

15

Epinio creates deployments for the pushed apps. Pods should have a health/ready/(startup) check. Is the k8s default good enough? What's the minimum we can do for apps. Should this be...

Increase per-item rate limit from 5ms to 5s. [#174439982](https://www.pivotaltracker.com/story/show/174439982)

Only changing the image does not update the instance group

1

**Describe the bug** Only changing the image, does not create a new bpm secret, so the qsts is not updated. As a workaround, one could add a label to the...

frab changed http endpoint

1

Hi, frab just changed the http endpoint for 'vote_dump' to 'export_accepted'. https://github.com/frab/frab/blob/master/config/routes.rb#L109

DefaultNamespaces Cache Option doesn't allow All Namespaces for List

5

I'm trying to l[imit the controller to watch config maps only in one namespace](https://github.com/rancher/fleet/pull/2033/commits/42c7e7fcf7367f196b39f9d3451e44616d0f5177), while watching other resources in all namespaces. Mainly for performance reasons, I don't want the controller...

Might help against future problems with dangling events.

That should work, right?