Beni Cherniavsky-Paskin

For BoundServiceAccountTokenVolume, reloading from file implemented in #532 (currently on every request! feedback wanted whether that needs optimizing).

Oh, I thought Kubeclient is purely rest-client but turns out we also use [http gem](https://github.com/httprb/http) for `WatchStream` functionality. And http also requires native extenstions via `http-cookie` < `domain_name` < `unf`...

httparty is also pure ruby, uses 'net/http'. - Streaming: looks like yes: https://github.com/jnunemaker/httparty/blob/master/examples/stream_download.rb - No builtin persistent (https://github.com/jnunemaker/httparty/issues/155) but there is https://github.com/soupmatt/persistent_httparty

@msufa You'd switched watching to use http.rb for Celluloid support — can you comment whether any of the alternatives here (especially httpclient) could work for your needs? (BTW, do you...

We might also need websocket support at some point. No idea what means in terms of gems. It seems from docs websockets are already supported for watches (don't know if...

Just a data point: replacing `http` and `rest-client` with `httpclient` would make the bundle way smaller: 34MB -> 5MB. It's now dominated by `ffi` and `unf_ext`.

In case anyone here has opinions between Faraday / httpclient / another lib — NOW is your last chance to influence! :wink: Join #466 discussion ^^. Note that support for...

Can you run kubectl with `--loglevel=11` to see what requests it does to gather the info?

Whoa, now _that_ is interesting!

I propose for kubeclient 3, we solve this by adding Kubeclient::SSLError which will wrap both OpenSSL::SSL::SSLError and RestClient::SSLCertificateNotVerified. There is a tradeoff with wrapping exceptions — makes easier to recognize...