Uploaded image for project: 'OpenShift Storage'
  1. OpenShift Storage
  2. STOR-1443

Automatically restart `csi-snapshot-webhook` pods when the secret `csi-snapshot-webhook-secret` is updated

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • Product / Portfolio Work
    • False
    • Hide

      None

      Show
      None
    • False
    • None
    • None
    • None
    • None

      The pod `csi-snapshot-webhook` mounts the secret:
      ```

      $ cat assets/webhook/deployment.yaml
kind: Deployment
metadata:
  name: csi-snapshot-webhook
  ...
spec:
  template:
    spec:
      containers:

        volumeMounts:
          - name: certs
            mountPath: /etc/snapshot-validation-webhook/certs

      volumes:
      - name: certs
        secret:
          secretName: csi-snapshot-webhook-secret

      ```
      Hence, if the secret is updated (e.g. as a result of CA cert update), the Pod must be restarted.

              rh-ee-mpatlaso Maxim Patlasov
              rh-ee-mpatlaso Maxim Patlasov
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: