[cinder-csi-plugin] Cannot rotate secret dynamically
emreberber opened this issue · comments
Is this a BUG REPORT or FEATURE REQUEST?:
/kind bug
/kind feature
What happened:
When I delete or rotate the Openstack application credential, I updated the cinder-csi-cloud-config secret but it does not receive the new credentials.
What you expected to happen:
I was expecting it to continue dynamically with new credentials without restarting any pods
How to reproduce it:
I installed the Cinder CSI Plugin, then deleted the applicaiton credential, then created a new credential and updated the secret
Anything else we need to know?:
Environment:
- cinder-csi-plugin version: 2.30.0
- OpenStack version: 6.6.0
- Others:
not sure I fully understand this .. you had a application ID in CSI then it expired and you replace the new application ID but it doesn't work?
Yes, that's right
did you try kill the pod then reload it o ensure at least in this way it works?
I think it's in cloud-config which should reload when pod restart?
It will be fixed after pod restart, but can't it dynamically get the current secret without doing that?
that will need recreate the openstack client which I think it's not currently supported, folks can comment if my understanding is correct