Uploaded image for project: 'OpenShift API Server'
  1. OpenShift API Server
  2. API-1534 Reduce impact of encryption key rotations
  3. API-1570

Optimize key lookup with multiple transformers

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • kube-apiserver
    • None
    • False
    • None
    • False
    • OCPSTRAT-1344 - [API] Support soft-rotation of ETCD datastore encryption

      Currently if an encryption config a lot of read keys, the kube-apiserver storage code will go through each transformer in order to find the key which makes the lookup very inefficient.

      https://github.com/kubernetes/kubernetes/blob/master/staging/src/k8s.io/apiserver/pkg/storage/value/transformer.go#L86-L151

              vdinh@redhat.com Vu Dinh
              dgrisonn@redhat.com Damien Grisonnet
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: