Axel Christ

# Summary Currently, each user that can `get` / `list` a pool can see its `Status.Capacity` / `Status.Allocatable`. Since this is potentially confidential information, we should enable hiding the field...

# Summary Currently, we only allow filtering by `TCP`, `UDP` and `SCTP` (`SCTP` also being highly irrelevant). We should also allow `ICMP` as protocol and, when specified, allow filtering by...

### Summary The ORI interface in the onmetal-api project includes support for load balancers, NAT gateways, and alias prefixes. While these features can be useful in certain scenarios, they add...

# Summary Currently, to map e.g. `VolumeClass`es of a `volumebroker` to `ori` `VolumeClass`es, we have a `VolumeClassMapper` that continuously `List`s `VolumeClass`es and maps them. Instead of doing so, we should...

# Summary Currently, to listen to events of an `ori-` runtime, we continuously `List` and infer events using the ori event generator. This works good enough, however it is not...

# Summary `machinebroker` and `volumebroker` generate names for the brokered resources that might appear cryptic or lengthy in the target cluster. There should be an easy way to track brokered...

# Summary When allocating IPs / Subnets, we deterministically choose the next IP / CIDR. This allows potential attackers to guess the next allocated space, giving them potentially unwanted insight....