Marc Boorshtein

> Go to settings view and increase items per page number. yep, this fixed it > Possibly you have used some custom way to deploy Dashboard and settings are not...

Looks like the issue is that if any of the `settings` options are set, then any that aren't explicitly set are set to 0

@ahmetb isn't a tool used to automate repetitive tasks (like integrating clusters for authentication) something that kubectl plugins were built for? This tool automates a multi-helm chart deployment (among other...

/remove-lifecycle rotten

@ahmetb sorry, the plugin wasn't as ready as i thought and has gone through several revisions and updates. That said: > Do you mind pasting examples of commands/flags your plugin...

Would an off-line CA that could issue break-glass admin certs be more secure? you still have a "root" credential in the off-line CA that you would need to protect, but...

i haven't, though i still have it setup. i'll also ping my customer that was planning to roll this out and see if they've tried it. I'm being lazy, but...

doing some digging this appears to be the logic that's causing the issue: https://github.com/kiali/kiali/blob/82719968b06f7d69e5955efe08b6a3d59f1e8b8f/business/namespaces.go#L337 Kiali is falling back to the `ServiceAccount` when unauthorized. This may make for a better user...

> I'm not sure how far back this goes but for at least as long as I have known (2-3 years), reads are done from the local kube cache with...

> A user who can GET on should be able to see all the applications in that namespace but a user who cannot GET on shouldn't even see that namespace...