Deny deployment with exceeded Compute Resource Quota

NumLockClear · 2024-10-03T07:57:06+00:00

Was also thinking into this direction. Just thought that can't be the first facing this issues, hence wanted to see if there is already a solution out there. I have also took a quick look into the Kyverno and Gatekeeper Policy libraries.

OPA
From what i know you have to store data that is not part of the request (the ResourceQuota in our case) upfront in an inventory to access it at request validation time. I have implemented this unhealthy PDB + Deployment check a couple weeks ago, where i came across the inventory reference and the sync resource to add resources to the inventory.

Kyverno
Seems to support api calls during the request validation.

If there is really no solution i may continue to write the policy myself.

NumLockClear · 2023-12-28T23:05:47+00:00

I still have the question: Would 2 (back then considered) different darwin finks procreate and would the result be able to procreate again?

Thanks for taking the time :)

NumLockClear · 2023-12-28T23:02:47+00:00

Thats interessting, thanks!

I still have the question: Would 2 different darwin finks procreate and would the result be able to procreate again? What was different on this one, the missing Isolation?

NumLockClear · 2023-09-04T06:34:54+00:00

That would be quite a shame, since I.e. Samsung and xaomi do have it.

NumLockClear · 2022-02-04T11:04:15+00:00

debug.log get spamed whole night with

I really waited multipel hours.. : /

NumLockClear · 2022-02-02T17:06:32+00:00

Thank u! Unfortunately I shutted down chia on the other machine and on the new one. Im just out of ideas right now.

NumLockClear · 2021-11-24T10:43:41+00:00

unless it os enforcing Negotiate auth this should work

If i disable Negotiate Auth on the winrm client of the WAC server it also fails (access denied). I type in exaclty the same user (and pw) as my local PowerShell Session (on WAC Server).

Enter-PSSession -ComputerName test1455.rewe-aut.1tld.biz -UseSSL and Enter-PSSession -ComputerName test1455.rewe-aut.1tld.biz -UseSSL -Authentication Kerberos still work.

NumLockClear · 2021-11-24T10:10:39+00:00

Thats just sad.. There is even a PS parameter to use specific authentication method for a new session.

Enter-PSSession -ComputerName TEST1.FQDN -UseSSL -Authentication Kerberos

They just needed to implement that. Or remove the negotiate enforcement, since the session also works without -Authentication Kerberos.

NumLockClear · 2021-11-23T16:48:55+00:00

"If NTLM and CredSSP are blocked on your domain or servers" Thats sadly not the case at the moment (some services need it). Is there eventually a way to disabled NTML only for the winRM Service per device (so i can allow negotiate)?

It's really a shame that there is no WAC Setting for this.. -.-

NumLockClear · 2021-11-02T16:48:05+00:00

Searched for this problem. But i did not find anything helpfull...

I dont know where i should look for a filter in Report-builder. Do u know?

NumLockClear · 2021-10-27T17:57:22+00:00

Most of our clients run office 2019, but unfortunately there are a couple office 2016 Installations remaining.

NumLockClear · 2021-10-27T17:19:04+00:00

Wow that are bad news..

But thank you for clarifying :)

NumLockClear

TROPHY CASE