Sarah Hodne

I'm not sure it would really do what we need. The problem is that draining instances from an ELBv2 load balancer is quite slow (usually 4-5 minutes in our experience),...

It does not, in our case. The problem is that all the pods can be drained off the node faster than the node can be deregistered from the load balancer....

I'm curious about this too, I'm investigating to see if Bottlerocket would be a good fit for us, and load balancer deregistration is a recurring pain point in our cluster...

That should work in our case, I think. If it's easier, even just having a sleep or some flag that ensures the drain takes at least x minutes should be...

@Aaron1011 Could you add a test for this as well?

@Aaron1011 Hmm, good point. We would have to add tests for how things are encrypted, which would require "hijacking" the key by giving some key that we know the private...

As a workaround for the Kubernetes client-go library, I'm using this config to manually ignore those versions, in case anyone else is looking for something like this: ```json { "packageRules":...

Opened a PR for this: #138.

I don't think the TomDoc spec really needs to specify the formatting at all. TomDoc is more about the structure than the formatting. If you want to use Markdown, use...

I notice that the default CoreDNS deployment in EKS seems to have this security context: ```YAML securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true capabilities: add: - NET_BIND_SERVICE drop: - all ``` Would...