Dario Vianello

We managed to get around it by iptables DNAT-ing the DNS packets to a different DNS server than the one hosted by the Concourse Worker process. Any idea why the...

We're also blocked from migrating to `v2` because of this. And yes, `http_proxy` won't cut it, as we need to pass the same `ProxyCommand` @davidkarlsen is referring to.

@kron4eg, would this add an external dependency to the process, i.e. Vault? Instance profiles "just work" in AWS, and there's built-in code for using them in the various AWS SDKs.

@kron4eg, fair point. Is there any way `machine-controller` could be forced to use `kube2iam` then? My understanding is that it should actually be transparent, with `kube2iam` intercepting calls to the...

Hey, > @dvianello the problem with kube2iam (from machine-controller perspective), is that we can't differentiate between instance profile and kube2iam. The implicit nature of those credentials makes me worry. Up...

Hi @aegershman, we have a requirement for removing environments after a certain TTL defined at deployment time. At the moment, we're storing the expiry time in the lock, and we...