Comments (24)
justaugustus
commented on June 17, 2024
/milestone v1alpha1
/priority important-soon
/help
from cluster-api-provider-azure.
k8s-ci-robot
commented on June 17, 2024
@justaugustus:
This request has been marked as needing help from a contributor.
Please ensure the request meets the requirements listed here.
If this request no longer meets these requirements, the label can be removed
by commenting with the /remove-help command.
In response to this:
/milestone v1alpha1
/priority important-soon
/help
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
from cluster-api-provider-azure.
awesomenix
commented on June 17, 2024
Uses NSG with #139, bastion VM could be an alternative instead of default, closing this
/close
from cluster-api-provider-azure.
k8s-ci-robot
commented on June 17, 2024
@awesomenix: Closing this issue.
In response to this:
Uses NSG with #139, bastion VM could be an alternative instead of default, closing this
/close
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
from cluster-api-provider-azure.
justaugustus
commented on June 17, 2024
/reopen
from cluster-api-provider-azure.
k8s-ci-robot
commented on June 17, 2024
@justaugustus: Reopened this issue.
In response to this:
/reopen
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
from cluster-api-provider-azure.
alexeldeib
commented on June 17, 2024
What's the preferred resolution to this issue? Implementing a bastion (which I assume would be open to the internet?) or locking down the control plane NSG further? Seems a little difficult without user input to determine e.g. the desired ranges.
from cluster-api-provider-azure.
alexeldeib
commented on June 17, 2024
Seems like this is going towards bastion VM, just saw #175
from cluster-api-provider-azure.
fejta-bot
commented on June 17, 2024
Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close.
Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale
from cluster-api-provider-azure.
fejta-bot
commented on June 17, 2024
Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.
If this issue is safe to close now please do so with /close.
Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle rotten
from cluster-api-provider-azure.
fejta-bot
commented on June 17, 2024
Rotten issues close after 30d of inactivity.
Reopen the issue with /reopen.
Mark the issue as fresh with /remove-lifecycle rotten.
Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/close
from cluster-api-provider-azure.
k8s-ci-robot
commented on June 17, 2024
@fejta-bot: Closing this issue.
In response to this:
Rotten issues close after 30d of inactivity.
Reopen the issue with/reopen.
Mark the issue as fresh with/remove-lifecycle rotten.Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/close
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
from cluster-api-provider-azure.
justaugustus
commented on June 17, 2024
I'm not sure if this is still true, but re-opening to investigate.
/reopen
/remove-lifecycle rotten
/remove-priority critical-urgent
from cluster-api-provider-azure.
k8s-ci-robot
commented on June 17, 2024
@justaugustus: Those labels are not set on the issue: priority/critical-urgent
In response to this:
I'm not sure if this is still true, but re-opening to investigate.
/reopen
/remove-lifecycle rotten
/remove-priority critical-urgent
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
from cluster-api-provider-azure.
k8s-ci-robot
commented on June 17, 2024
@justaugustus: Reopened this issue.
In response to this:
I'm not sure if this is still true, but re-opening to investigate.
/reopen
/remove-lifecycle rotten
/remove-priority critical-urgent
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
from cluster-api-provider-azure.
justaugustus
commented on June 17, 2024
/remove-priority important-soon
/priority critical-urgent
from cluster-api-provider-azure.
fejta-bot
commented on June 17, 2024
Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close.
Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale
from cluster-api-provider-azure.
fejta-bot
commented on June 17, 2024
Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.
If this issue is safe to close now please do so with /close.
Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle rotten
from cluster-api-provider-azure.
CecileRobertMichon
commented on June 17, 2024
/remove-lifecycle rotten
from cluster-api-provider-azure.
CecileRobertMichon
commented on June 17, 2024
So I think what we need to do here is:
- Change the default NSG rules so they are more restrictive, we don't want the NSG to ever be open to the whole internet
- Look into Azure Bastion and maybe implement it as an optional feature.
@jadarsie would this issue be of interest to you?
from cluster-api-provider-azure.
jadarsie
commented on June 17, 2024
/assign jadarsie
from cluster-api-provider-azure.
fejta-bot
commented on June 17, 2024
Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close.
Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale
from cluster-api-provider-azure.
CecileRobertMichon
commented on June 17, 2024
/close
from cluster-api-provider-azure.
k8s-ci-robot
commented on June 17, 2024
@CecileRobertMichon: Closing this issue.
In response to this:
/close
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
from cluster-api-provider-azure.
Related Issues (20)
- clusterclass control-plane namingStrategy is not applied
- Self-Hosted cluster deletion failing in scenarios when manual deletion is attempted first. HOT 8
- Allow no k8s version for ManagedClusters HOT 1
- CAPZ should document which versions of Azure APIs are actually in use
- Cluster with custom VNET is stuck in Creating status
- clusterctl init doesn't work when metadata is merged but release isn't published HOT 1
- CAPI v1.7.0-beta.0 has been released and is ready for testing HOT 1
- Support disabling bastion host HOT 1
- Cluster fails to reconcile with `etcdserver: request is too large` HOT 3
- Set default ENV variables for clusterctl templates
- Support setting routeTables to virtualnetworkssubnets for AKS managed clusters HOT 5
- Unable to provision AKS extensions which don't contain plan or publisher
- Documentation on how to configure CAPZ clusters to pull from a Private ACR registry HOT 1
- CAPZ isn't compatible within a vcluster, with workload identity enabled on AKS. HOT 1
- Creating an AKS cluster or properties with uppercase letters causes failure HOT 12
- Adding AAD extensions for VMSS in AKS created by Cluster API HOT 5
- CAPZ upgrade - cluster-api-provider-azure failed to reconcile with worker cluster with existing vnet/subnet HOT 10
- MSI query failure when MSI and cluster are in different subscriptions
- Add experimental ASO-based API HOT 3
- Allow setting ResourceGroupName in AzureManagedControlPlaneTemplate HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cluster-api-provider-azure.