Matthieu Paret

Networkpolicy - Allow existing namespace

3

**Describe the bug** When networkpolicies are activated, mizu does not work. Also we cannot pre-setup networkpolicy inside mizu namespace because mizu refuse to start if the namespace mizu already exist....

Is it possible to disable the diff feature ?

4

## Question We have oversize issues with helm release as the diff storage is duplicating the whole data and the data is already big. I checked the documentation but it...

Publish helm chart to github pages

10

### Pitch The helm chart should be published so we can install it with classic helm command without having to clone the whole Maston repository. Also this will enable to...

Be able to configure index settings / ILM with CRD

13

## Proposal Be able to configure ILM (and generally index settings) through a CRD. **Why is it so important?** This makes possible to natively industrialize (reducing a lot the cost...

Be able to decide when certificates will be rotated to minimize maintenance operations

3

## Proposal When using multiple remotes ES clusters in different k8s clusters, we need to manually synchronize certificates for the remote configuration as described here https://www.elastic.co/guide/en/cloud-on-k8s/current/k8s-remote-clusters.html#k8s-remote-clusters-connect-external. But as ES clusters...

## What issues does your PR fix? - Worker can stop to work and no liveness probes will restart it. ## What does your PR do? Add liveness and readiness...

Controller delete the release during the upgrade process without warning

15

Hello, We experienced a release deleting during upgrade, is it expected ? https://github.com/elastic/cloud-on-k8s/issues/4734#issuecomment-892748226 ``` kubectl logs -f helm-install-elastic-operator-jzwnf -n elastic-system CHART="${CHART//%\{KUBERNETES_API\}%/${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT}}" set +v -x + cp /var/run/secrets/kubernetes.io/serviceaccount/ca.crt /usr/local/share/ca-certificates/ + update-ca-certificates...

As a user I would like to be able to suspend/resume multiple flux objects

5

**Short description** In the gitops way we could have some big changes impacting lot of resources and we like to control the application instead of applying 10000 changes at one...

**Short description** Flux can show the diff between git and the real state of the resource https://fluxcd.io/docs/cmd/flux_diff_kustomization/ As a user we need sometimes to be able to see the diff...

Security issue: iojs is run as root

7

In case of security flaw in the application run and in docker (as it happenned and will happen) cf: http://blog.zeltser.com/post/104976675349/security-risks-and-benefits-of-docker-application http://thenewstack.io/docker-addresses-more-security-issues-and-outlines-plugin-approach/ http://www.slideshare.net/jpetazzo/docker-linux-containers-lxc-and-security https://blog.xenproject.org/2014/06/23/the-docker-exploit-and-the-security-of-containers/