Comments (3)
bigkevmcd
commented on June 9, 2024
Pretty sure that this is the problem here #2388
from fleet.
0xavi0
commented on June 9, 2024
I've created #2465 to add a feature flag to enable this as experimental.
Once that is implemented we could try to merge #2375
from fleet.
manno
commented on June 9, 2024
can we rely on a random repository name to isolate workloads per agent? Like we rely on a random content resource name now?
Yes, for the tested registries (zot, dockerhub) we can.
how do OCI registries handle access controls? For example https://zotregistry.dev/v2.0.1/articles/authn-authz/#example-access-control-configuration.
Basic-auth.
can we support an installation wide default registry and override it per cluster?
We could, but going for "per gitrepo" first.
can/should we sync credentials to downstream cluster's secrets automatically? normally fleet doesn't.
Making this experimental and opening a security assessment request.
from fleet.
Related Issues (20)
- Drift correction not working
- Improve CRD documentation (`kubectl explain`) HOT 1
- Feature Request: Enable namespaceAnnotations (and namespaceLabels) as targetCustomizations
- RPC error: ResourceExhausted: trying to send message larger than max 2097152 HOT 4
- cluster.desiredReady is wrong if bundledeployment was deleted HOT 1
- Bundle is not re-generated and Gitrepo status is not updated when deleting a bundle. HOT 1
- metrics: Add metrics to gitops controller
- Enable node selection for shards
- Grafana Dashboard for Metrics
- Fleet Repo doesn't show any error when there is an issue (in fleet 0.9) HOT 1
- Improve Content resources cleanup
- Add extraEnvs to allow setting env vars for the controller
- Error `no matches for kind \"GitRepo\" in version \"fleet.cattle.io/v1alpha1\"` in gitjob logs after start
- Error with stacktrace in gitjob pod after sending a webhook event with wrong credentials
- ‘Continuous Delivery Dashboard’ shows bundles in not ready state
- Force Update on GitRepo is creating multiple job workloads that fill-up the entire pod limit.
- [SURE-8482] Misleading error message when trying to deploy cluster resources with targetNamespace HOT 1
- [SURE-8481] When deploying a helm chart stored in a OCI repository, if the configuration is invalid, fleet won't throw any error. Instead, the bundle will remain absent from the bundle list without any indications. HOT 3
- Submodules aren't cloned recursively anymore since Fleet 0.9.x
- cannot clone ssh url "SSH agent requested but SSH_AUTH_SOCK not-specified"
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from fleet.