Nicolas Degory

I've created a cluster with kops, with the option --kubernetes-version 1.9.6. In the _(Optional) Turn on an API version for your Cluster_ section I fail to get the runtime option...

CVE-2021-3449 in tag 1.4.0

1

**Describe the bug** `mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.4.0` contains `openssl` `1.1.1f-ubuntu2.2`, which has a vulnerability, fixed in `1.1.1f-ubuntu2.3`, which would be the version if the image was built again today. https://ubuntu.com/security/notices/USN-4891-1 https://people.canonical.com/~ubuntu-security/cve/CVE-2021-3449 **To Reproduce**...

SIGSEGV when updating the namespace of an existing release

1

Changing the namespace in the DSF for a chart already deployed ends up with a segmentation violation. helmsman v3.4.4 ``` 2020-06-23 22:39:47 NOTICE: -------- PLAN starts here -------------- 2020-06-23 22:39:47...

Logs show unencrypted passwords

1

The semaphore wrapper outputs the full config, including the admin password and the DB password: https://github.com/ansible-semaphore/semaphore/blob/v2.8.90/deployment/docker/common/semaphore-wrapper#L158 I would expect the logs to not contain any confidential data.

Add configurable annotations for the validating webhook configuration. This can be used for instance to tell cert-manager to inject a CA cert instead of passing it in the values file.

fix(chart): dedup imagePullSecrets in trillian

3

## Description of the change imagePullSecrets is duplicated in the Trillian chart, which fails the rendering when trying to set an image pull secret. ## Existing or Associated Issue(s) Closes...

**Description** Setting imagePullSecrets in a Trillian values file fails the chart rendering. ``` ➜ helm template trillian sigstore/trillian --set 'imagePullSecrets[0].name=regsecret' | polaris audit --audit-path - --only-show-failed-tests ERRO[0000] Error parsing YAML:...

High availability for Sigstore services

2

**Description** ## What needs to be improved documentation on how to run the Sigstore service with high availability. ## Context The Helm charts in sigstore/helm-charts default to a single replica...