tspearconquest

Results 278 comments of tspearconquest

I started looking through the code and found the copy-azurekeyvault-env container's manifest has this value hard coded to IfNotPresent at https://github.com/SparebankenVest/azure-key-vault-to-kubernetes/blob/master/cmd/azure-keyvault-secrets-webhook/pod.go#L68 Please allow us to change this value via the...

Hi @jasondellaluce Can you suggest a better limit? It has been running fine with this limit for some time so it's not clear what we should adjust that limit to....

As a user with security concerns in mind, I would like to see that this does not allow passing arbitrary curl options, and instead would prefer if the environment variable...

Hi Michael, Its technically still in the image. If you open the resulting image in the tool called [dive](https://github.com/wagoodman/dive), it allows you to explore the layers of an image. [This...

Hello, It doesn't appear to be related to the `--mount` flag. The below example should demonstrate the issue effectively: ``` FROM scratch RUN [ "/busybox/ls", "-l", "/" ] RUN [...

> So what is wrong (in this case) with the default of automountServiceAccountToken: true which makes ServiceAccount tokens available inside those Pods at a well known location? This method supplies...

Hi, I'm afraid that's not what `--cache-dir=` is for. > Flag `--cache-dir` > Set this flag to specify a local directory cache for base images. Defaults to /cache. However, this...