Thomas Mueller

I've got 14'000 CertificateRequest resources. :rocket:

unfortunately, we only have access to Certified and Marketplace operators. but not community operators.

> can you use `enableCertManager=false` ? The root cause for using `enableCertManager=true` was that the deployment references a secret `webhook-server-cert` which is not created without (related: https://github.com/redhat-cop/cert-utils-operator/issues/132)

it works for me. haven't looked at the code. I wondered why devel mode is the default. maybe the code could be changed to not enable devel mode by default....

The error: ``` 2022-10-06 12:47:25 +0000 [error]: #0 Fluent::Plugin::SplunkHecOutput: Failed POST to https://xxxxxxxx.com/services/collector, response: {"text":"Incorrect index","code":7,"invalid-event-number":1} ``` I've encountered with these 2 situations: 1. misspelled index name in the splunk.com/index...

The error message logged by the splunk logging pod is received from the Splunk server. So your SCK is connecting to the splunk server successfully, but the server rejects your...

Calling a HTTP endpoint is possible by this widely used image: https://github.com/jimmidyson/configmap-reload . Needs to run inside your pod. it doesnt implement signalling (SIHUP) a process.

Reporting it as a standard k8s event would be nice. Mockup: ``` $ kubecetl get events LAST SEEN TYPE REASON OBJECT MESSAGE 2m Normal ReloadTriggered deployment/myapp Reload of deployment "myapp"...

maybe the finaly fix could even be added to upstream (https://github.com/TresysTechnology/refpolicy-contrib/blob/master/fail2ban.te) directly

Or maybe just use scratch as base and only include the operator binary. then there is no need to update the base image.