Kay Yan
Kay Yan
> /remove-lifecycle stale > > Well, it just needs a 1-2 min review!! :( Thanks @hedayat The PR needs to reslove the conflicts.
Thanks @hedayat /approve
HI @mzaian, @VannTen Would you please help to review the PR :-)
> Should we really add more components to Kubespray ? One the thing mentionned in #6400 was about reducing Kubespray scope and maintenance load. > > NFD has an helm...
> I think there is some addons using helm currently (kubelet_csr_approver ?) optionally. However the helm_apps role has a bad interface (I wrote it T_T) and I plan to rewrite...
Hi @titansmc Follow https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#which-plugins-are-enabled-by-default. The kubespray may not have a solid reason to add the `PodNodeSelector` as the default plugins, But it's configurable. Best Regards :-)
> @yankay In that case it's not about defaults, but about which admission plugins needs a config file (which we use to conditionally push one) Thanks @VannTen I got it....
There are significant documents to describe the difference between `nerdctl` and `crictl.` :https://www.slideshare.net/AkihiroSuda/container-plumbing-days-2023-why-was-nerdctl-made For kubespray, using the `crictl_image_pull_command` as default is a good idea. It can share the same"pull image"...
Thanks @jpm38 The same as https://github.com/kubernetes/ingress-nginx/issues/9412 Is there any way to reproduce the issue :-)