Jakob Schrettenbrunner comments

Results 96 comments of


                                            Jakob Schrettenbrunner

Move fails when in-cluster IPAM is in use

I think we can close this one, since there have been no confirmations and no response here. Once I get around to it I'll test moving again, but I don't...

Allow impersonating service accounts in arbitrary namespace on remote clusters

> In a RoleBinding you can specify a ServiceAccount from a different namespace :) Are you talking about a Kubernetes RBAC RoleBinding or did I miss something? I'm not looking...

Allow impersonating service accounts in arbitrary namespace on remote clusters

Thanks for the detailed response. The second alternative looks interesting, and I wasn't even aware that was possible. I'd improve the documentation around it a bit though. If you're unfamiliar...

Allow impersonating service accounts in arbitrary namespace on remote clusters

>> impersonation should be limited by the permissions of the user in the Kubeconfig > > Really curious how are you achieving this, are you generating a Kubeconfig for each...

Allow impersonating service accounts in arbitrary namespace on remote clusters

> It's a security improvement to reduce the amount of long-lived credentials. Sure, long-lived credentials are always easier to set up, usually in any environment. Yes, security hardening often has...

Allow impersonating service accounts in arbitrary namespace on remote clusters

We took some time to discuss using Workload Identity and I did a small PoC to determine what's necessary to make this work in our setup. We haven't made a...