-
Story
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
BU Product Work
-
1
-
False
-
None
-
False
-
OCPSTRAT-193 - Automatically restart storage operators pods when the CA certificates are updated
-
-
The pod `shared-resource-csi-driver-webhook` mounts the secret:
$ cat assets/webhook/deployment.yaml
kind: Deployment
metadata:
name: shared-resource-csi-driver-webhook
...
spec:
template:
spec:
containers:
volumeMounts:
- mountPath: /etc/secrets/shared-resource-csi-driver-webhook-serving-cert/
name: shared-resource-csi-driver-webhook-serving-cert
volumes:
- name: shared-resource-csi-driver-webhook-serving-cert
secret:
secretName: shared-resource-csi-driver-webhook-serving-cert
Hence, if the secret is updated (e.g. as a result of CA cert update), the Pod must be restarted.