This issue was reported in the Kubernetes Security Audit Report

Description
The strconv.Atoi function parses an int - a machine dependent integer type, which, for 64-bit targets will be int64. There are places throughout the codebase where the result returned from strconv.Atoi

The PR is #4008

Last time I tried to get this working, the issue was with getting python.d
to properly load the Yoctopuce modules. As far as I could tell at the time, the dynamic import thing works, it's just an issue with getting Python to properly import modules that aren't in system.path, but I didn't look very deep beyond that. Part of the problem there is that the Yoctopuce Python

I'm using TLS on etcd 3.3.12 and have a mix of etcd proxies and masters. The proxies don't seem to honour the --cipher-suites setting, as it ends up with ECDHE-RSA-AES256-GCM-SHA384 despite --cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 being set.

$ pgrep -laf /usr/bin/etcd
21968 /usr/bin/etcd --listen-client-urls https://0.0.0.0:4000 --adv

The api has changed and some file can not be applied successfully

This link shows that some tag(development) has been removed from extensions/v1beta1. So files like [https://github.com/containous/traefik/tree/v1.7/examples/k8s/traefik-deployment.yaml](h

Bug description
Following the discussion here.
DestinationRule host resolution is wrong when DestinationRule with a specific host is affecting wildcard service entry host.

Expected behavior
Only service entry with the exact host should be affected by the DestinationRule

*Steps to reproduce the bug

I am running minikube version v1.5.2.

I discovered that if I specify an undefined "namespace" with the namespace option on the service command an error is reported but there is also a message that says "mini9kube crashed".

The exact command to reproduce the issue:
minikube service newservice -n unknown --url

The full output of the command that failed:

Move all Dockerfile samples to non-root user

Expected Behaviour

As an OpenFaaS end-user, I want to run all samples on my OpenFaaS cluster, even with the new non-root feature enabled.

Current Behaviour

curl https://get.helm.sh/helm-v3.0.0-linux-s390x.tar.gz.sha256
yields "Blob not found" sadness

Overview of the feature request

When having entities with many fields, having them in the entity-update.component.ts file could be tedious. Also, when coding side-by-side it will force me to duplicate my code for creating the form, updating the form and for creating the entity from form (those can be big methods).

**Motivation for or Use

What kind of request is this (question/bug/enhancement/feature request):
Bug

Steps to reproduce (least amount of steps as possible):

1. create a namespace
2. enable istio sidecar injection for the namespace
   3, deploy a job

Result:
job status success results in an error and envoy container continues to run as sidecar to the job

Environment information

• Rancher versio

https://github.com/LeCoupa/awesome-cheatsheets/blob/master/backend/node.js#L77 should be more like

const foo = require('./subfolder/foo.js')
console.log('foo "%s"', foo) // "foo"

// now grab the "module" wrapper around './foo.js'
const fooModule = require.cache[require.resolve('./subfolder/foo.js')]

console.log('foo module', fooModule)
// load module ./bar relative to ./foo
//

Docs to include node tainting on master and worker nodes. Also include tolerations.
--node-taint value (agent/node) Registering kubelet with set of taints

Issue Description

Type: bug report or feature request

Describe what happened (

Hi, I'm Yevgeny Pats Founder of Fuzzit - Continuous fuzzing as a service platform.

We have a free plan for OSS and I would be happy to contribute a PR if that's interesting.
The PR will include the following

• go-fuzz fuzzers (This is generic step not-connected to fuzzit)
• Continuous Fuzzing of master branch which will generate new

Feature Description

In vitessio/vitess#5419 I added a check to see if the user was root, and bail.

This relies on the user using the included shell script, which adds complexity and a bit annoying if the user wants to roll their own scripts around standalone vitess binaries.

It would be nice enhancement if mysqlctl itself (and possibly other components) chec

Expected behavior

When scheduling a Kaniko build on GCB, the artifact's Target parameter gets passed as an argument to the Kaniko executor on GCB, just like when building it in-cluster.

Actual behavior

The Kaniko build spec function [doesn't include code to cre

Hi.

To be able to use jib-core on environments where there is no Docker CLI installed, or programmatically (e.g. with Testcontainers), it would be helpful to be able to provide a custom implementation of DockerClient that will be using the REST API, for instance.

It seems to me that the interface will have the following methods:

• `load(ImageTarball, Cons

Every kubeflow image should be scanned for security vulnerabilities.
It would be great to have a periodic security report.
Each of these images with vulnerability should be patched and updated.

Hi everyone,
I working in Federal Service of Data Process in Brasil. Now, Im using the CoreOS as base Kubernete OS, but recently I receive a demand to migration from CoreOs to other OS with suporte eBPF. In this context, the Flatcar was selected. However, i use the kubespray to deploy automatization.

My question is simple: The kubespray has support to Flatacar OS?

Tkz

The first few Google results for OpenShift alert documentation point to https://docs.openshift.com/online/dev_guide/notifications.html , which is now a dead link.

Please help Google point results to the right link, such as by redirecting from this URL to a valid one.

Description

Add Azure notebook to our SETUP doc.
I tested google colab and Azure notebook to run reco-repo without requiring creating any DSVM or compute by myself, and it works really well with simple tweaks to the notebooks (e.g. for some libs, should install manually).

I think it would be good to add at least Azure notebook to our SETUP doc, where users can easily test out our repo w/o

Part of the deployment as the first service deployed we should add the opencensus kubernets-operator (see https://github.com/census-ecosystem/kubernetes-operator) (look for some of the PRs for more instructions on how to build/deploy).

This is important to ensure the right resources are associated with the exported metrics/traces (one of the critical label is the container_name which is not ava

Is this a bug report or feature request?

• Feature Request

What should the feature do:
Create a new document to explain the different settiong and options available in the Operator CRD

What is use case behind this feature:
We do not have this document, and although we have most of the things explained in the CRD file, it could be interesting to have this information also as a

Is this a request for help? (If yes, you should use our troubleshooting guide and community support channels, see https://kubernetes.io/docs/tasks/debug-application-cluster/troubleshooting/.): No

What keywords did you search in NGINX Ingress controller issues before filing this one? (If you

麻烦指导，谢谢
版本和配置信息

ubuntu@vm-1-10-ubuntu:~$ kubectl version 
Client Version: version.Info{Major:"1", Minor:"13", GitVersion:"v1.13.1", GitCommit:"eec55b9ba98609a46fee712359c7b5b365bdd920", GitTreeState:"clean", BuildDate:"2018-12-13T10:39:04Z", GoVersion:"go1.11.2", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"13", GitVersion:"v1.13.1", GitCom