Steven E. Harris

Detect imported extvars and TLAs via sentinel import path

1

When a Jsonnet consults an Importer for a path nominated by an external variable or top-level argument file-based command-line flag, the "importedFrom" parameter passed to [the `Importer.Import` method](https://github.com/google/go-jsonnet/blob/master/imports.go#L29-L51) is not...

"jsonnet_to_json" "outs" attribute does not allow writing to multiple directories

2

The _jsonnet_ command-line tool can emit JSON to multiple files when invoked with the `-m` flag. It interprets the keys of the top-level map as file paths to which to...

More than one Certificate nominating same Secret induces runaway creation of many CertificateRequests and Orders

6

**Describe the bug**: As[ first noted in the "cert-manager" channel](https://kubernetes.slack.com/archives/C4NV3DWUC/p1644588237975879) in the "Kubernetes" Slack workspace, we suffered a cluster outage that turned out to be due to _cert-manager_. Someone created...

Introducing pattern constraint causes "cue export" to spin indefinitely

4

### What version of CUE are you using (`cue version`)? cue version v0.4.4-0.20220915174651-ad253ed099e9 -compiler gc CGO_ENABLED 1 GOARCH amd64 GOOS darwin GOAMD64 v1 ### Does this issue reproduce with the...

AssignMetadata: Allow targeting objects by annotations as well as labels

30

# Desire Per [discussion that I started in the "opa-gatekeeper" channel](https://openpolicyagent.slack.com/archives/CDTN970AX/p1654030008808579) of the "Open Policy Agent" Slack workspace, I would like to be able to select target objects for the...

get-keypairs: Tolerate key set items without certificates

1

Allow the _kops get keypairs_ command to consume key sets with old key pair items that lack an associated X.509 certificate. When the command is invoked without the `--distrusted` flag...

Accommodate S3 VFS paths designating bucket owner

3

In VFS paths using the "s3" scheme designating paths within S3 buckets, accept the "x-amz-expected-bucket-owner" query parameter nominating [an AWS account ID that we expect will own the S3 bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-owner-condition.html)....

"kops update cluster" panics while creating JWKS for OIDC

8

**1. What `kops` version are you running?** _Client version: 1.24.1 (git-v1.24.1)_ **2. What Kubernetes version are you running?** Starting with version **1.19.9**, upgrading to version **1.21.14**. **3. What cloud provider...

Validation of OpenTelemetry plugin's "config.resource_attributes" field is too strict

5

### Is there an existing issue for this? - [X] I have searched the existing issues ### Kong version (`$ kong version`) 3.2.2 ### Current Behavior Following [the documentation for...

Recent container images published to quay.io lack signatures

6

# Problem Description The recent container images for the Prometheus Node Exporter [published to the _quay.io_ registry](https://quay.io/repository/prometheus/node-exporter?tab=tags) are lacking signatures. The images for versions 0.16.0 and 0.17.0 are signed as...