Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rotate the whereabouts kubeconfig #459

Open
lubronzhan opened this issue Apr 17, 2024 · 1 comment
Open

Rotate the whereabouts kubeconfig #459

lubronzhan opened this issue Apr 17, 2024 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@lubronzhan
Copy link

lubronzhan commented Apr 17, 2024

Is your feature request related to a problem? Please describe.
The token in /etc/cni/net.d/whereabouts.d/whereabouts.kubeconfig is about to expire in 1 month, but nothing will rotate it. This token is used by multus.

For now, what's the proper way to rotate the certificate? Delete the whereabouts pod so that it triggers install-cni.sh again?
Describe the solution you'd like
Whereabout should be able to rotate the token and certificate inside kubeoconfig.

Or do what multus did, using thick deployment, that listening through a socket so that multus could call it through that socket https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/docs/thick-plugin.md
Describe alternatives you've considered

Additional context
Add any other context or screenshots about the feature request here.

@lubronzhan lubronzhan added the enhancement New feature or request label Apr 17, 2024
@lubronzhan
Copy link
Author

Hi @dougbtv thanks for taking a look, question about proper way to rotate the kubeconfig, is it just restarting the whereabouts the pod?

Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants