Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use ionotifywait with auto rotate feature #260

Open
cjaber opened this issue Aug 18, 2023 · 0 comments
Open

Use ionotifywait with auto rotate feature #260

cjaber opened this issue Aug 18, 2023 · 0 comments
Labels
bug Something isn't working

Comments

@cjaber
Copy link

cjaber commented Aug 18, 2023

Describe the bug
For an app I deployed in EKS, I am mounting a ssm parameter as a file and I activated the autorotate feature provided in https://secrets-store-csi-driver.sigs.k8s.io/topics/secret-auto-rotation to miror the changes I do in the ssm console. the mounted file seems to work and changes seems to be reflected and visible by printing the text file inside the docker image. However, in order to automatize and react on file changes I am trying to use the inotifywait -e modify /path/to/file for that. but this latter command seems to return before any changes occurs. are we aware of any shortcoming of the csi driver that would not enable the ionotifywait command to work properly

To Reproduce

  1. mount a ssm file parameter as a text in a eks pod (simple ubuntu for example)
  2. use the inotifywait -e modify /path/to/file

Do you also notice this bug when using a different secrets store provider (Vault/Azure/GCP...)? No

If yes, the issue is likely with the k8s Secrets Store CSI driver, not the AWS provider. Open an issue in that repo.

Expected behavior
the command 2) above should return only when the file is really changed

Environment:
ubuntu docker

Additional context
N/A

@cjaber cjaber added the bug Something isn't working label Aug 18, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant