Dmitrii Kovalkov

Results 11 comments of Dmitrii Kovalkov

``` root@:~# umask 0027 root@:~# namei -l /opt/deckhouse/bin/ f: /opt/deckhouse/bin/ drwxr-xr-x root root / drwxr-xr-x root root opt drwxr-x--- root root deckhouse drwxr-x--- root root bin root@:~# namei -l /opt/deckhouse/tmp/...

Hello, folks! Fixed in https://github.com/flant/cert-manager-webhook-regru/releases/tag/v1.2.0

Workaround - restart cert-manager ``` kubectl -n d8-cert-manager rollout restart deployment cert-manager ```

Fixed in https://github.com/flant/cert-manager-webhook-regru/releases/tag/v1.2.0

Same situation if we change-registry from HTTPS -> HTTP Some logs ``` kubectl -n d8-system exec -ti svc/deckhouse-leader -c deckhouse -- deckhouse-controller helper change-registry --user dkp --password 'XXX' --scheme HTTP...

JFYI looks like Prometheus 2.51 [released](https://github.com/prometheus/prometheus/releases/tag/v2.51.0) with needed bugfix

Maybe we do not need this ability and just need only change default value to ``` - --acme-http01-solver-resource-limits-cpu=0.1 - --acme-http01-solver-resource-request-cpu=0.01 ```

Updated in https://github.com/cert-manager/cert-manager/pull/6902#issuecomment-3302437710 Looks like needed podTemplate will be in cert-manager 1.19