Steven E. Harris
Steven E. Harris
This bit me again today, three weeks later, again with this "x/sys/unix" package. Is there any reliable workaround?
This isn't about Gatekeeper, but @rblaine95, it looks like you're trying to skirt [KEP 279](https://github.com/kubernetes/enhancements/tree/master/keps/sig-auth/279-limit-node-access). Are you feeding these "role" labels to the kubelet's configuration? If so, what leads you...
I understand the desire; we do the same. It's just that you can't trust labels like that as _workload attractors_ (for use in pod affinity terms) if they're set by...
>I think something is blocking the `Node` resource from having that label when it gets created. That's likely [the "NodeRestriction" admission plugin](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#noderestriction) enforcing [KEP 279](url), as your desired label's qualified...
> I'd like to think through whether this could be used to create a divergent system Though the example and capability that @maartenvdezz requested here is about set membership, being...
> Currently we don't allow for cross-field checking, so if you're assigning to field `x` you can only test `x` (or its parents). This means _Assign A_ and _Assign B_...
/remove-lifecycle stale
/remove-lifecycle stale
/remove-lifecycle stale
/remove-lifecycle rotten