Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restart paravirtual CPI POD if /etc/cloud/ccm-provider related secret changes #786

Closed
wyike opened this issue Nov 23, 2023 · 0 comments
Closed
Labels
kind/feature Categorizes issue or PR as related to a new feature.

Comments

@wyike
Copy link
Contributor

wyike commented Nov 23, 2023

What would you like to be added?

In paravirtual mode, a secret container supervisor cluster access token is mounted to CPI pod.
We want to add a mechanism to watch that secret and restart CPI Pod if its updated

Why is this needed?

The access token could be rotated for example by kubelet. The new secret watch mechanism can avoid unnecessary failures from CPI Pod when accessing supervisor cluster.

@wyike wyike added the kind/feature Categorizes issue or PR as related to a new feature. label Nov 23, 2023
@wyike wyike closed this as completed Jan 9, 2024
k8s-ci-robot added a commit that referenced this issue Jun 12, 2024
…nge-to-release-1.28

Cherry pick e2e env change and #786 fix to release 1.28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature Categorizes issue or PR as related to a new feature.
Projects
None yet
Development

No branches or pull requests

1 participant