Uploaded image for project: 'OpenShift API Server'
  1. OpenShift API Server
  2. API-1534 Reduce impact of encryption key rotations
  3. API-1570

Optimize key lookup with multiple transformers

    XMLWordPrintable

Details

    • Sub-task
    • Resolution: Unresolved
    • Undefined
    • None
    • None
    • kube-apiserver
    • None
    • False
    • None
    • False
    • OCPSTRAT-1344 - [API] Support soft-rotation of ETCD datastore encryption

    Description

      Currently if an encryption config a lot of read keys, the kube-apiserver storage code will go through each transformer in order to find the key which makes the lookup very inefficient.

      https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/storage/value/transformer.go#L86-L151

      Attachments

        Activity

          People

            vdinh@redhat.com Vu Dinh
            dgrisonn@redhat.com Damien Grisonnet
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: