Thomas

### 📑 I have found these related issues/pull requests I did look but didn't find anything. ### 🛡️ Security Policy - [X] I agree to have read this project [Security...

CI: start enforcing a subset of staticcheck

10

Whilst working on CUE, I've noticed a lot of static check messages in my editor. Would it be worth adding something like [golangci-lint](https://golangci-lint.run/)? ```sh ❯ go run honnef.co/go/tools/cmd/staticcheck@latest ./... cmd/cue/cmd/add.go:176:8:...

evalv3: OOM and signal killed (64GB)

6

### What version of CUE are you using (`cue version`)? $ go run cuelang.org/go/cmd/[email protected] version cue version v0.10.0-alpha.2.0.20240726151100-e68bd632c29e go version go1.22.5 -buildmode exe -compiler gc CGO_ENABLED 1 GOARCH amd64 GOOS...

thanos sidecar is too restricted

13

**What is missing?** The Thanos sidecar section of the `Promethues` CRD is too restricted. It makes deployments which don't exactly align with what was envisioned almost impossible without implementing the...

Use fetch instead of XMLHttpRequest

1

I'd be interested in using this with Cloudflare Workers, but it does not work because the platform only has fetch.

chore(registry/storage/driver/s3-aws): refactor writer creation

7

The logic is identical, but has been separated out and reorganised for clarity. Whilst working on #4424, I found it really hard to understand the intention of what was happening,...

fix(registry/storage/driver/s3-aws): use a consistent multipart chunk size

22

Some S3 compatible object storage systems like R2 require that all multipart chunks are the same size. This was mostly true before, except the final chunk was larger than the...

cert-manager should not propagate gateway labels to certificates

1

**Describe the bug**: Kubernetes has introduced ApplySets, an improvement to server side apply and pruning. https://kubernetes.io/blog/2023/05/09/introducing-kubectl-applyset-pruning/ ApplySets work by applying labels to objects it manages. It looks like cert-manager is...

Kubernetes Operator PodSecurity warnings

9

### What is the issue? Following https://tailscale.com/kb/1236/kubernetes-operator/ using https://github.com/tailscale/tailscale/tree/abc874b04e85619afeed5f187f6b6c150f4eefbe/cmd/k8s-operator/manifests results in: ``` clusterrole.rbac.authorization.k8s.io/tailscale-operator created Warning: would violate PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "operator" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container...

Empty yaml documents should be ignored when importing lists

6

### What version of CUE are you using (`cue version`)? $ cue version cue version 0.9.2 go version go1.22.5 -buildmode pie -compiler gc -trimpath true DefaultGODEBUG httplaxcontentlength=1,httpmuxgo121=1,tls10server=1,tlsrsakex=1,tlsunsafeekm=1 CGO_ENABLED 1 GOARCH...