Krzysztof Słonka

Dependabot seems to be unable to create PRs for vulnerable dependencies

15

Issue edited (original content below) ### What happened? Our GH dependabot seem to be unable to open PRs to fix vulnerable dependencies: https://github.com/kumahq/kuma-website/security/dependabot This might be due to dependencies having...

Add instructions on how to repackage our images

4

### Description Some people want to use different base images, we should provide instructions on how to package kuma to achieve that.

### Description We could have even bigger matrix, like this one: ``` arch: - amd64 - aarch64 # arm64 os: - amazonlinux:2022 - archlinux:latest - debian:bookworm - fedora:latest - redhat/ubi8:8.6...

Better way of syncing annotations to docs

4

### Description During review of https://github.com/kumahq/kuma/pull/8319 I noticed with Ilya that https://kuma.io/docs/2.4.x/reference/kubernetes-annotations/#kubernetes-annotations-and-labels is missing `kuma.io/sidecar-uid` annotation. We might be missing some others. I guess we could have some automated way...

Clarify cert verification for External Service TLS

9

### Description We should backfill https://github.com/slonka/external-service-with-own-cert (that I created to try to reproduce an issue reported on slack) as an E2E test in Kuma.

Add line number when validation fails in kumactl on multiple policies

1

### Description Follow up from https://github.com/kumahq/kuma/issues/9005. When something fails validation in kumactl we only say: "x.y.z must be defined", but if this is a field that is present in a...

docs(tp): add info about adjusting exclude inbound/outbound ports

1

this came as a question on slack Did you sign your commit? [Instructions](https://github.com/kumahq/.github/blob/main/CONTRIBUTING.md#sign-your-commits) yes Have you read [Contributing guidelines](https://github.com/kumahq/.github/blob/main/CONTRIBUTING.md)? yes

Indicate if request was blocked by TrafficPermission in AccessLogs

11

### Description It would be useful to have `policy id` in `logs`/`response headers`/`something else(?)` to be able to quickly identify which policy caused "RBAC: access denied". This can be achieved...

RateLimitedBackOff set to 8 seconds retries after ~11 seconds

8

### What happened? We're setting "x-retry-after" to 8 seconds but the delay is longer. Also, request time was quite small so not sure what happened there: 

Only call `AfterBootstrap` when a plugin is really used

5

### What happened? Continuation from: https://github.com/kumahq/kuma/pull/6583#discussion_r1175250280