TJ Zimmerman

> @cbui got it working with argo too. First edit the `argocd-repo-server` deployment to set `readOnlyRootFilesystem: false`. Then exec to the `argocd-repo-server` pod and create `~/.docker/config.json`. This was just a...

@cbui, you're right. Granting the following (All list/read actions to `ecr` and `ecr-public`) to the IRSA-bound role doesn't seem to enable auth/pull. Still getting a 401. Seems like `helm pull`...

⚠️ **WARNING** ⚠️ This is a roundabout solution that solves a software problem with infrastructure which is seldom a good idea. If you can afford to, either stop using Kustomize...

This also happens when you try and use a private repo for which you don't have a credential secret defined.

You can define a `canary` strategy that might replicate the desired behavior provided you have a Virtual Service that routes traffic to different Services based on match criteria. ```yaml spec:...

I saw similar exceptions occurring when [calculateWeightDestinationsFromExperiment](https://github.com/argoproj/argo-rollouts/blob/master/rollout/trafficrouting.go#L356) was called. My guess was that Argo was calling this function to determine the weight the experiment should have and it was returning...

I started looking for a solution to this problem today too. I discovered someone managed to do it this way but it's not working for me. https://github.com/influxdata/influxdata-docker/issues/251 Did you two...

Figured out a way actually. With Kubernetes at least. By providing a `lifecycle` policy you can execute a command on the pod after it has been launched. For example: ```...

Actually, never mind. There is a different _official_ way to accomplish this. The docker container supports dropping `.sh` files to configure the database server. Search the docs here for `/docker-entrypoint-initdb.d`...