Vedran Lerenc

Thank you @shreyas-s-rao and apologies for not asking first out-of-band.

Pro: - We need to find a way (either recommended manual steps or automation) to replace unencrypted volumes with encrypted volumes (we changed that >1y ago, but there are still...

Yes, exactly. I was commenting on the sentence "Scale down the statefulset (if it isn't already scaled down)" and if you have the capacity to automate https://github.com/gardener/gardener-extension-provider-aws/issues/646#issuecomment-1330188838 that would be...

Gardener provisions K8s cluster on various cloud providers. TKG by means of the cluster API as well. You cannot set up Gardener via TKG (or vice versa) - this doesn't...

Well, this clarifies it and @Diaphteiros is probably the best to answer this question. In general, I would not expect specific problems from your setup as you can use various...

Yes, I believe so. When I requested the limit raise for our accounts, I was anyways informed, that CLBs are on their way out and we should rather use NLBs....

Whoa, that's bad, thank you! This may also explain another incident reported with NLBs in the last days. You picked this port range, because it's the NodePort range? Yes, something...

Sure, don't see many other alternatives besides not doing anything. ;-)

I am experiencing the same problem. Pools are defined in the shoot spec, but priorities in some other resource that can be created/modified only after the cluster was created (and...

@dongyingbo I didn't say that, actually the opposite. Because CA is only one solution (even though the industry/community standard) and the configuration is specific to it, a CA extension would...