Enable tsreload from cass-operator
What is missing?
Management API will soon add a new endpoint which forces a reload of the truststore. This is to enable new CA certs to be added to the node without a full restart.
I'm not sure what the best way to access this functionality is, but I presume it should probably be called from cass-operator, since that is where logic to manage the nodes usually resides.
I can see two options:
- We add an annotation to the pod (similar to the restart annotations that we normally add) and cass-operator picks this up before calling the management API endpoint on the specific node that needs a reload.
- We create a new CassandraTask which does the same.
@burmanm what are your thoughts on this? Any preference?
Why is this needed?
We have CA reloading problems.
client.go change + a task is fine (I'm not a fan of pod annotations, since we don't listen to those). I'm assuming this is a DSE specific feature.
client.go change + a task is fine (I'm not a fan of pod annotations, since we don't listen to those). I'm assuming this is a DSE specific feature.
Roger. It is DSE only, yes. We don't need to worry about this in OSS Cassandra.
➤ Miles Garnsey commented:
Closed via this PR +truststore reload task #686+ ( https://github.com/k8ssandra/cass-operator/pull/686 )