Avo Sepp

Importing azuredevops_project does not find existing assets

3

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request * Please do...

OPAL should have JSON-Schema validator capability

2

**Describe the solution you'd like** A bad OPAL fetch can result in unexpected and hard to troubleshoot errors. Especially if the maintainers are not as familiar with the original system....

**Is your feature request related to a problem? Please describe.** When OPAL receives a very large input from a fetcher, the OPA/OPAL pod tends to crash and restart automatically. This...

**Is your feature request related to a problem? Please describe.** Slack has a [token rotation](https://api.slack.com/authentication/rotation) API which lets endpoints refresh their OAuth token periodically. Not all applications support the Slack...

chore(deps): upgrade haproxy to 2.9.7-alpine - Closes [#18159]

5

HAProxy was last updated June 14, 2023 to 2.6.14. That release now has two CVEs which are being flagged by Wiz scanner as High vulnerability. 2.6.14 CVE Listings * CVE-2023-40225...

# Summary HAProxy for ArgoCD HA was last updated June 14, 2023 to 2.6.14. Since that release there are two new CVEs categorized as High for that release. * CVE-2023-40225...

Helm Chart rendering RunAsUser at the wrong indent

9

 See image. runAsUser is not being saved to Kubernetes because it is being rendered one tier above SecurityContext. It should be nested under SecurityContext.

Why is is default user Root and runAsNonRoot false?

3

Hi, Question is in the title. The default configuration for Windmill's Helm chart sets Windmill as root. Is there a developer reason for this? It impacts our ability to install...

2.11.0 -> 2.11.1 changed the Registry for Redis and HAProxy from Docker to Amazon ECR breaking Cosign verification

8

**Describe the bug** A recent patch modified the Container Registry used for both Redis and HAProxy. This changed the Registry source from Docker to an Amazon ECR. Those of us...

https://github.com/smallstep/helm-charts/blob/a45a9ffd50792d09c024e6d4e0164a1a16a3bd2b/step-certificates/templates/tests/test-connection.yaml#L12 The test connection job won't run in Namespaces which are set to Restricted by Pod Security Admission standard. Adding a SecurityContext to the Test Connection job will fix this...