Jan Willies

> on M1, "Monterey", it works unless the sleep kicked in, or for another reason, then I have to open the settings, choose another device, and return to the device...

It would be very interesting to issue an HTTP request from dex and let OPA do the authorization for which claims to include, maybe even handover additional infos like HTTP...

Facing the same use-case. We have a shared cluster and there's no way for us to know all the namespaces to blacklist. Maybe another idea is to have kube-monkey run...

Thanks @deadtrickster, deactivating `prometheus_process_collector` fixes the problem. I'll try to build the `prometheus_process_collector`-plugin with the same distro which I'm running the resulting rabbitmq next to rule out glibc mismatches

That's a usecase we are very interested in as well.

Yeah that sounds great. We found the same pattern in provider-helm quite useful

> So yes having the ability to both specify existing resources as crossplane resources WITHOUT crossplane trying to take full ownership is a MUST to keep adopting crossplane. Other possible...

IIUC thick images could be used to workaround this issue: https://github.com/crossplane/crossplane/pull/2758

It might be interesting to check how `kustomize` and `kpt` approach this: - kpt functions: https://googlecontainertools.github.io/kpt/guides/producer/functions/ - Kustomize Plugin Composition API ([#2299](https://github.com/kubernetes/enhancements/tree/master/keps/sig-cli/2299-kustomize-plugin-composition)) example for kustomize: https://youtu.be/YlFUv4F5PYc?t=1361

I believe there's room for interpretation for certain type of information wether they are sensitive or not. IMO it's best to leave this to the user instead of to the...