Skip to content

Document auto restart of pods on secret rotation #1647

@ewan-chalmers

Description

@ewan-chalmers

Describe the solution you'd like
When secret auto-rotation is enabled, users of Secrets Store CSI Driver may look for a means to have workload pods automatically restarted when a mounted secret is updated. While restart code is assumed not to be in scope of the driver project, the project could outline a suggested approach.

Anything else you would like to add:
I have implemented a kubernetes controller to optionally restart pods when mounted secrets are updated.

I have a document ready to propose for inclusion in docs/topics.

Note that Reloader does not cover the case where secrets are mounted in pod volumes.

This follow from discussion on the slack community: https://kubernetes.slack.com/archives/C013PUP2WRK/p1727349029443369?thread_ts=1724065955.676549&cid=C013PUP2WRK
Environment:

  • Secrets Store CSI Driver version: (use the image tag): N/A
  • Kubernetes version: (use kubectl version): N/A

Metadata

Metadata

Labels

kind/documentationCategorizes issue or PR as related to documentation.kind/featureCategorizes issue or PR as related to a new feature.lifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions