Stefan Büringer

> Doing a high level review as the PR is still WIP. > > In this PR it looks like `clusterctl init` and `clusterctl init list-images` both perform actions. We...

/reopen The test is stable because we skipped it: https://github.com/kubernetes-sigs/cluster-api/blob/f73a27729acf3bc2cce2479220e1460eb6f73efb/controlplane/kubeadm/internal/controllers/controller_test.go#L159 Fine for me to close the issue anyway if we decide we don't want to track the skipped test. (just...

/cc @ykakarap

Sounds good. One detail: > - open a kubectl proxy tunnel only to the extensions we actually need > - update the local registry with the proxy address (to be...

I don't have access anymore unfortunately. Basically we told Promtheus via it's discovery mechanism to pull from a specific URL (~ the one I mentioned above) and use client certificates...

I got it to work with kubectl. The following is a discovery request against the RuntimeExtension service with: * namespace "default" * name: "webhook-service" * port "443" * protocol "https"...

@vincepri Would be nice to hear your take on how realistic this issue is.

> @sbueringer Let's re-asses this before setting triage-accepted Sounds okay. Essentially the first half of the issue is figuring out if deadlocks can occur.

Hm I think that should not happen. Never had the problem on my machine. Maybe there is a way to confirm that the token / your account is really over...

Might be a stupid question but as we only have the sources in the go modules (https://pkg.go.dev/sigs.k8s.io/cluster-api#section-directories), from where else can we get the built/rendered release assets?