Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ensure pods roll when referenced secret changes #62227

Open
craigfurman opened this issue Apr 29, 2024 · 0 comments
Open

Ensure pods roll when referenced secret changes #62227

craigfurman opened this issue Apr 29, 2024 · 0 comments

Comments

@craigfurman
Copy link
Member

craigfurman commented Apr 29, 2024

There are a few places in the helm chart annotate Deployments (and other pod-template-y things) with hashed references to secrets. This practice appears to be intended to cause pods to roll when the referenced secret changes.

We aim to keep the following list of examples up-to-date as we discover them while building parity between the helm chart and the appliance:

  1. The checksum/redis annotation
  2. The checksum/pgsql.secret annotation

In some of these examples, changes to the underlying referenced secrets' content do not appear to cause pods to roll, since it's just hashing the names. We could consider using a mechanism such as https://github.com/stakater/Reloader in the appliance, to ensure that pods do roll.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant