Leonard Cohnen

Since I had the same issue: My pre-existing ginkgo version was v2, but the test are currently written in v1. You can check this via `ginkgo version`. After downgrading there...

We are also encountering an issue with similar symptoms. We are using the Rook/Ceph quickstart with cluster-on-pvc.yaml on Azure (non-AKS!) with the official Azure CSI driver and fc36. Downgrading containerd...

> For this reason, forcing the number of monitors to 1 at the time of initial deployment seems to be the easiest solution at the moment. Thanks, this workaround also...

1. We are following the [Rook/Ceph quickstart](https://rook.io/docs/rook/v1.10/Getting-Started/quickstart/#tldr) with `cluster-on-pvc.yaml` so we are directly applying the .yaml files out of the repository. We've also (internally) documented this [here](https://github.com/edgelesssys/constellation/blob/main/.github/docs/nfs.md#deploy-rook). As far as...

There was also an issue with the default used for the tunneling feature, which tried to use the config-map value if available (https://github.com/cilium/cilium-cli/pull/1870/commits/da5c0c9eb9cff9e8baebabb0d9f16acd371c38db). Therefore I tried to document the current...

The question is what to do about those architectures which have the control-planes excluded from node-to-node encryption. One can either add some complexity to the whole thing to allow a...

> A "cheaper" solution might be to allow strict mode to allow unencrypted traffic for certain IPCache entries. I also thought about that because it is especially neat to re-use...

Hey, thanks a lot for engaging in the discussion and bringing up those points. I always enjoy it when people care about their security. In general, I think that it's...

FYI: You can have a look on our current downstream implementation here: https://github.com/cilium/cilium/pull/28612. Maybe we use it as a basis for a upstream solution.

> At the moment, at least upstream Cilium does not have a way to persist public keys across node reboots. I assume you mean that Cilium cannot rely on the...