Tim Buckley

This adds guides for using Machine ID with Kubernetes and App access. It also includes a small fix for the App API access guide (https://goteleport.com/docs/application-access/guides/api-access/#application-information) which suggests using the Teleport's...

Wave occasionally causes secrets to be deleted unexpectedly

8

There seems to be a race condition where Wave will occasionally cause secrets to be unexpectedly deleted along with a parent deployment when only the deployment is removed via `kubectl...

Properly support image hashes in FROM instructions

1

This adjusts the grammar to support hashes in FROM instructions, for example `alpine@sha256:074d...`. Note that `ImageRef` has already parsed these properly for some time, however the dockerfile grammar considered `@`...

Parse failure on FROM with sha hashes

2

e.g. ```Dockerfile FROM quay.io/pusher/wave@sha256:59246319ba2d49fe6096ca80627b02e91faba97a83d9f0231fb08238c315b5e2 ``` ...fails with: ``` [DEBUG] ignoring Dockerfile.test, could not parse as dockerfile: could not parse Dockerfile: --> 3:25 | 3 | FROM quay.io/pusher/wave@sha256:59246319ba2d49fe6096ca80627b02e91faba97a83d9f0231fb08238c315b5e2␊ | ^--- |...

First attempt to run an action fails

1

The first attempt to run an action when the service is "cold started" always seems to fail. For example, a simple "power on" task will do nothing when first executed,...

AutomateIt looks like a solid Tasker alternative and would be great to support. It looks like it's API has some major differences to Tasker so it might take some refactoring...

Add keystone-shell container

2

The keystone-shell is a container to help debug keystone instances in Kubernetes. It provides a ptipython-based shell with highlighting, autocomplete, and access to the Keystone and Kubernetes APIs, along with...

Look at using p2cli in grafana

1

We recently started including Python in our grafana images to process templates with jinja2. This caused a ~50% increase in the size of the image. [p2cli](https://github.com/wrouesnel/p2cli) potentially provides the same...

Log pipeline CI is pushing duplicate images

2

It seems the log pipeline CI is pushing duplicate images in some cases. For example: https://hub.docker.com/r/monasca/agent-collector/tags/ Two images (`master-20171019-195001` and `master-20171019-194745`) were pushed ~3 minutes apart. The build log for...

keystone-init integration path

4

Requirements: - [x] support password lookup from secrets (in case of lost keystone) - [x] support password changing with lost secrets (in case of lost k8s) - [x] support secret...