scylla-operator icon indicating copy to clipboard operation
scylla-operator copied to clipboard

Deprecate hostNetworking

Open tnozicka opened this issue 2 years ago • 3 comments

HostNetworking is one of the problematic parts of the operator that isn't multitenant and causes (un)expected issues around port conflicts with whatever runs on the host. It also blocks progress as any new port we introduce in the pod can break existing installations. Making the ports configurable still has the issue where any new port breaks existing deployments.

Inherently it also degrades security.

Now that we'll have different networking options to expose ScyllaDB on different IP ranges (#1270), given the security issues and conflicts with the host's system, it seems like a good time to gradually sunset that path.

- [ ] https://github.com/scylladb/scylla-operator/issues/2135
- [ ] #2087
- [ ] Remove deprecated hostNetworking

tnozicka avatar Sep 06 '23 05:09 tnozicka