Rob Best

There's quite a few moving parts in the setup, but here's more or less the terraform I'm using for the KMS key and the service account: ``` resource "google_kms_key_ring" "my_project"...

@byxorna @kirooshu @alex-laties

Thanks for looking at the PR @kirooshu. Yep, that works for me. I'll make the changes.

@kirooshu I've pushed the suggested changes.

:bow: Thanks for the approve @kirooshu. Is this good to be merged?

Ping - just checking if anyone has had a chance to look at this? @alex-laties @defect

Ping - just checking if anyone has had a chance to look at this?

I've logged this PR to address the issue: https://github.com/tumblr/k8s-sidecar-injector/pull/53. I'm also interested in #44 though. Is there any utility in having the ignored namespaces in the code at all? Could...

Updated #53 to remove the ignored namespaces feature from the code altogether.

A little bit more information from the misbehaving container and `runc init` process. ``` ● docker-87a4886cbdaba184ef499c9a4f11debee4ae0b871cb5d1bdd65089db14884b76.scope - libcontainer container 87a4886cbdaba184ef499c9a4f11debee4ae0b871cb5d1bdd65089db14884b76 Loaded: loaded (/run/systemd/transient/docker-87a4886cbdaba184ef499c9a4f11debee4ae0b871cb5d1bdd65089db14884b76.scope; transient) Transient: yes Drop-In: /run/systemd/transient/docker-87a4886cbdaba184ef499c9a4f11debee4ae0b871cb5d1bdd65089db14884b76.scope.d └─50-DevicePolicy.conf, 50-DeviceAllow.conf,...