-
Story
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
BU Product Work
-
1
-
False
-
None
-
False
-
OCPSTRAT-193 - Automatically restart storage operators pods when the CA certificates are updated
-
-
The pod `openstack-manila-csi-controllerplugin` mounts the secret:
$ cat assets/controller.yaml
...
containers:
- name: provisioner-kube-rbac-proxy
volumeMounts:
- mountPath: /etc/tls/private
name: metrics-serving-cert
volumes:
- name: metrics-serving-cert
secret:
secretName: manila-csi-driver-controller-metrics-serving-cert
Hence, if the secret is updated (e.g. as a result of CA cert update), the Pod must be restarted