cyrus-mc

feat: Add func GetManagedObject

2

Retrieve object from cache based on ResourceKey. Cache manifest if it isn't already cached. This is required in support of https://github.com/argoproj/argo-cd/issues/3854 and https://github.com/argoproj/argo-cd/pull/3863.

Use `objectSelector` capability to limit what objects get sent to mutating webhook

2

MutatingWebhooks can be defined with an `objectSelector`: ``` › kubectl explain MutatingWebhookConfiguration.webhooks.objectSelector KIND: MutatingWebhookConfiguration VERSION: admissionregistration.k8s.io/v1 RESOURCE: objectSelector DESCRIPTION: ObjectSelector decides whether to run the webhook based on if the...

Traffic manager is coded to expect the mutating webhook certificate and key file to be mounted at /var/run/secrets/tls/crt.pem and /var/run/secrets/tls/key.pem. This breaks with convention used by Kubernetes when creating TLS...

Unable to build multi-stage Dockerfile with `FROM <alias>`

10

Attempting to build a multi-stage Dockerfile (followed this example) https://github.com/uber/makisu/blob/master/lib/parser/dockerfile/test-files/example-multistage-dockerfile Here is my exact Dockerfile ``` FROM node:8.11.1-slim AS build COPY package*.json src/ ENV DIR=/src WORKDIR /$DIR RUN npm install...

With some special base images, image size drastically larger than when built using docker

8

New to makisu and built my first image. After successful build I find that the image is (as reported by docker images) 1.49G. That same image built with docker results...

Support sub-path in storeAPI target configuration

1

Multi-cluster setup requires exposing store API targets. Through ingress this is only support if the API is at the root of the ingress. It would be nice to allow targets...

feat: support tls_ca and tls_certificate_key for mongodb connections

5

### Community Note * Please vote on this pull request by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original pull request comment to help the community and maintainers prioritize this request...

SElinux not correctly working with overlayfs

29

Environment OS: CentOS 7.1 Kernel: 3.10.0 rkt: 0.10.0 systemd: 208 When trying to start any container, with selinux set to Enforcing I received the following error: /usr/lib/systemd/systemd: error while loading...

Invalid configuration generated with using protocol `HTTPSPROXY`

5

When enabling protocol `HTTPSPROXY` generated configuration results in the following error when connecting via `TLS`: `error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number` This is a result of the `proxyProtocolStack` being set to [...

Environment variables not available during pre-hook workflow

1

Not sure if this is a feature request or a bug, but when running pre-hook workflow not all of the environment variables defined here (https://www.runatlantis.io/docs/custom-workflows.html) are present. For example PROJECT_NAME...