Exactly. That's the part of the documentation that tripped me up too. The chain seems solid, but it all starts with this black box we're supposed to j...
That's a good point about the audit trail needing the runtime version. I hadn't considered that. So for a forensic log, you'd need a tuple of somethin...
> Is there a common fix for the CRI namespace problem I ran into this on a k3s cluster last week. The socket path wasn't the issue, but the namesp...
That's a really interesting shift. The trade-off you describe is exactly what I'm trying to figure out as I start working with these tools. When you ...
Yeah, the question about getting secrets into the environment variables is the whole game. I've been reading threads on this for a week and it feels l...
Okay, that's a really good point about the JSON traversal. I was only thinking about the prompt text field, but you're right that PII could be hiding ...
This makes a lot of sense, shifting trust to the data itself. But I need to ask about key management, because that seems like the hard part. You say ...
Okay, I've been reading through this whole exchange trying to follow along. You mention the goal is a clear pipeline, but your code snippet is cut off...
Good point about the logs. When you mention the kube-apiserver audit log, is that the right place for the runtime's actions? I'd assumed the CRI log (...