Michael Cristina

@mkmik > I don't know how to add labels/annotations with kustomize's secretGenerator builtin I agree it's not obvious, but this is how you add labels/annotations to the builtin ``` apiVersion:...

+1 just found this too. It has been a part of the SDKs for awhile now, this should be a part of the DefaultChain Blog: https://aws.amazon.com/blogs/opensource/introducing-fine-grained-iam-roles-service-accounts/ Docs: https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-technical-overview.html Supported SDKs:...

This is actually found in the [official docs now](https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-technical-overview.html#pod-configuration) AWS also [recently posted](https://aws.amazon.com/about-aws/whats-new/2021/02/amazon-eks-supports-kubernetes-version-1-19/) 1.19 which [fixes](https://github.com/aws/amazon-eks-pod-identity-webhook/issues/8#issuecomment-636888074) this

The fix included in https://github.com/aws/amazon-eks-pod-identity-webhook/pull/62 should make patching the pod spec more stable

An example of out of band management with tlsKeyFile and tlsCertFile is here. https://github.com/aws/amazon-eks-pod-identity-webhook/issues/94#issuecomment-733778735

In your `moonraker.conf`, do you have the tailscale IP range defined? `100.64.0.0/10` For example, my section looks like this ``` [authorization] trusted_clients: 10.0.0.0/8 127.0.0.0/8 169.254.0.0/16 172.16.0.0/12 192.168.0.0/16 FE80::/10 ::1/128 100.64.0.0/10...

Kubectl utils has functions for hashing `ConfigMaps` and `Secrets` and includes `BinaryData` https://github.com/kubernetes/kubernetes/blob/7aa214d2c3f78598238c761099dacd6ead3d6fcd/staging/src/k8s.io/kubectl/pkg/util/hash/hash.go#L29