-
Sub-task
-
Resolution: Done
-
Normal
-
None
-
None
-
None
-
None
-
False
-
-
False
-
CFE Sprint 225, CFE Sprint 226
Context
When the new ca configmap controller is added to the operator - the kubelet CA configmap is guaranteed to be eventually consistent with its source from openshift-config-managed namespace. The updates may be synced any time which is reflected in the contents of the mounted volume of the agent POD. However the agent container doesn't have means to detect those changes.
This task aims at addressing the before mentioned problem. Proposed solution:
- modify nodeobservability controller to add an annotation with the hash of the CA configmap contents to the agent daemonset's POD template. This will result in the POD recreation upon the contents update (thus the hash update).
- requeue all nodeobservability instances on the changes made against the kubelet configmap (example)