Reloader icon indicating copy to clipboard operation
Reloader copied to clipboard

[Feature Suggestion] Support for watching secretproviderclasspodstatuses in addition to secrets and configmaps (CSI driver)

Open dpkano opened this issue 1 year ago • 4 comments

Hi,

Now that many projects are choosing to use CSI drivers to deliver their secrets into their workloads directly (as a file in the fs), a secret rotation does not involve K8s secrets. Whenever a new version of a secret is delivered via CSI driver, the object secretproviderclasspodstatuses.secrets-store.csi.x-k8s.io is updated with version information.

If Reloader watched these objects, we could still do a rolling upgrade of our workloads using Reloader when migrating to using CSI driver delivered secrets.

Would this community be interested in such feature?

Cheers, Daniel

dpkano avatar Apr 26 '23 17:04 dpkano