k8s icon indicating copy to clipboard operation
k8s copied to clipboard

Client Certificates in a K8S cluster with multiple CRDB StatefulSets

Open knutster opened this issue 6 years ago • 1 comments

I am currently writing a Kubernetes Operator for CRDB. While porting over the statefulset artefacts from the crdb repo it became clear that when running multiple CRDB clusters in the same namespace in K8s the root key (default.client.root) will be valid in all clusters, which is probably not what we want.

All other client keys with the same name will also work on all clusters inside K8S (granted the user exists.) . I propose changing the naming convention for keys to something like:

<namespace>.<cluster-name>.<role>.<name>
in stead of <namespace>.<role>.<name> what we have today.

knutster avatar Feb 26 '19 15:02 knutster

Submitted pull request #19

knutster avatar Feb 27 '19 20:02 knutster