Yitao Zhang

anti affinity missing on synced pod if namespace selector matches all namespaces

3

### What happened? We are installing multiple charts in different namespaces, and for some pods, they need pod anti affinity across all the namespaces, to make sure no two pods...

Query about minimum permission required by -server-resources cluster role

2

While doing security review of our clusters, we found wildcard permission used in a prometheus-adapter cluster role. This violates the principle of least privilege. The ask is to provide the...