Philipp Belitz comments

Results 57 comments of


                                            Philipp Belitz

Slow memory leak causing cosign subprocess termination

@sbeck14 We did the golang switch - so hopefully no more memory leaks are happening. Should this still be the case feel free to reopen the issue :)

Feature request: Allow for adding custom labels to the deployment manifest of the helm chart

@jimonthebarn Yes, absolutely. A MR is highly appreciated.

Failed calling webhook

It seems that Connaisseur takes too long to do the signature verification. It has max 30 seconds to do so, as this is the max amount Kubernetes allows and at...

Failed calling webhook

i guess this is no longer a problem. with the golang release there should also be a significant validation speedup. closing this,

Internal error occurred: failed calling webhook "connaisseur-svc.connaisseur.svc": failed to call webhook: Post "https://connaisseur-svc.connaisseur.svc:443/mutate?timeout=30s": EOF

Are you running your test as part of an automated script, or are you doing manual steps -> starting up AKS, installing connaisseur, then trying to start a nginx pod?...

Internal error occurred: failed calling webhook "connaisseur-svc.connaisseur.svc": failed to call webhook: Post "https://connaisseur-svc.connaisseur.svc:443/mutate?timeout=30s": EOF

@JackMeagher2001 @muralivakkala very sorry. we are a fairly small team that work on this project and sometimes we have more or less time to get any progress. currently we are...

Internal error occurred: failed calling webhook "connaisseur-svc.connaisseur.svc": failed to call webhook: Post "https://connaisseur-svc.connaisseur.svc:443/mutate?timeout=30s": EOF

@JackMeagher2001 we are aiming for 2 more months. there are still some things to do, but we are already quite satisfied with how the go variant looks 🤗

Internal error occurred: failed calling webhook "connaisseur-svc.connaisseur.svc": failed to call webhook: Post "https://connaisseur-svc.connaisseur.svc:443/mutate?timeout=30s": EOF

@JackMeagher2001 @muralivakkala It has been done, the golang version is available 🎉

Ci/refactor integration tests

will use https://github.com/sse-secure-systems/connaisseur/pull/1607 in favor of this

Connaisseur verifies signature with every helm reconcile even with automaticUnchangedApproval enabled

Hi @dbbhat ! Would flux reconcile a resource regardless of any changes ...? I'm asking because of the following problem: your remote repo will always be out of sync with...