Christian Simon
Christian Simon
**Is this a BUG REPORT or FEATURE REQUEST?**: /kind feature **What happened**: API server is quite vulnerable to attacks that setup arbitrary IP addresses (cf https://github.com/kubernetes/kubernetes/pull/71980 / #670) on status.podIP...
**What happened**: To understand the implications of a lock down better it would be good to investigate which external assets we pull and communicate with. (related to #670) **What you...
**Is this a BUG REPORT or FEATURE REQUEST?**: /kind bug **What happened**: I was trying to build tarmak in go 1.11.4 I am getting this: ``` go generate $(go list...
https://github.com/jetstack/tarmak/blob/master/docs/introduction.rst#architecture-overview I think you @mattbates created some diagrams for the puppetconf talk not too sure if you still are able to find those. I am thinking about the wing arch...
> Uncomment only one, leave it on its own line: > /kind feature Maybe we want to use a golang based tool to attach/detach EBSs and potentially even ENIs. This...
I think we should investigate if it's necessary to have multiple config files of tarmak split into single files. Problems with the current approach: - Defaulting is reapplied once we...
> Uncomment only one, leave it on its own line: /kind bug /area security **What happened**: The metrics-server is using a self signed certificate to present it's API to the...
/kind feature **What happened**: We should never destroy a EBS state volume of vault or etcd **What you expected to happen**: We should fail hard and require a flag `--force-destroy-state-data`...
Document steps necessary to roll over service account keys / secret encyption and CA