-
Story
-
Resolution: Done
-
Undefined
-
None
-
None
-
None
-
Product / Portfolio Work
-
False
-
-
False
-
1
-
None
-
None
-
None
The pod `azure-file-csi-driver-controller` mounts the secret:
$ oc get po -n openshift-cluster-csi-drivers azure-file-csi-driver-controller-cf84d5cf5-pzbjn -o yaml
...
containers:
name: driver-kube-rbac-proxy
volumeMounts:
- mountPath: /etc/tls/private
name: metrics-serving-cert
volumes:
secret:
defaultMode: 420
secretName: azure-file-csi-driver-controller-metrics-serving-cert
Hence, if the secret is updated (e.g. as a result of CA cert update), the Pod must be restarted