Artem Danilov

> I think this requires tikv to support ip communication natively,tidb-operator can't finish this feature. I don't think the communication part is controlled by operator, it just needs to allow...

@mikechengwei > I think tikv does not support ip communication, it only supports hostname. TiKV does support direct IP address configuration: https://docs.pingcap.com/tidb/dev/command-line-flags-for-tikv-configuration#--advertise-addr, bit tidb-operator doesn't allow to configure it. DNS...

> @Tema What are the labels for TiDB nodes? I don't see any. This is a problem. I expect operator to assign the same labels to TiDB as it does...

> "Or allow security/cacert-path to take precedence of secrete instead of blindly overriding it", how do you want to do this exactly? Basically instead of https://github.com/pingcap/tidb-operator/blob/62b11ad37ddd3482dfec519770d6c65011e24d6d/pkg/manager/member/pd_member_manager.go#L836-L841 I thought we can...

@mikechengwei > Is it possible to accomplish your needs by enhancing the additionalVolumeMount configuration, if you configure the same volume name I've tried that, but k8s forbids mounting to the...

Sounds good @DanielZhangQD.

@DanielZhangQD, we have decided to use TiDB layer in our setup. Fortunately, tidb-operator allows to specify separate certificates for client and inter-component already, so it does not block us anymore....

> We have updated the configuration to TOML format What do you mean? I can see there are two ways to specify config. First option is plaint TOML: https://github.com/pingcap/tidb-operator/blob/563f3147453e66a5bec7ec1a1f87a07cd820a92a/examples/gcp/tidb-cluster.yaml#L22-L24 The...

We use `hostNetwork:true` flag to avoid network virtualization overhead for high throughput use cases. Also we connect to PD and TiKV cluster from a client which is located on a...

@mikechengwei https://github.com/pingcap/tidb-operator/pull/4530 only allows me to enable `hostNetwork:true`, which we already do. But it does not allow me to configure --advertise-peer-urls for PD/TiKV to listen on a different port.