Michael Reiger

Results 4 comments of Michael Reiger

for clients the network property "vrfshared" is always false

The culprit may also be https://github.com/metal-stack/metal-api.

Audit events have node IP address as source address for requests

The apiserver SNI feature with its istio gateway moves the problem from the apiserver service (which is now internal) to the `istio-ingressgateway` server, with the additional "bonus" that we can...

Also reconcile destination prefixes

This needed metal-networker from the current master; v0.8.3 was too old. So we'll need to release metal-networker too.

TLS with selfsigned certificate

Update: Using the selfsigned certificate as CA certificate (Parameter ca_file) works. Still, it is not clear to me how the verify_mode parameter is supposed to work. Can anyone clarify?