Nick Young
Nick Young
So, turns out the recommendation from sig-auth here is to supply PSPs for now, and @mattmoor is right, they should be benign in clusters that don't have it. So, we...
Agreed and thanks @tsaarni. I think that we should ensure that our example deployments meet the Baseline security standard at a minimum, and ideally they should work in a Restricted...
Looks like @tkna has made all the requested changes as agreed on here, is there anything else that we need to do to keep this moving? @joestringer, @YutaroHayakawa, @marseel?
Thanks for this report @dctrwatson, that does seem not great, would you be able to grab a sysdump file and upload it please? (Using https://docs.cilium.io/en/stable/operations/troubleshooting/#automatic-log-state-collection )?
With the merging of #37402, there is now a way to use a CiliumGatewayClassConfig to request that all Gateways in that GatewayClass use Nodeports instead of Loadbalancer. @sayboras is working...
Thanks for this @samip5, would you be able to collect a sysdump from the cluster please? (https://docs.cilium.io/en/stable/operations/troubleshooting/#reporting-a-problem if you need some instructions).