You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@solr.apache.org by GitBox <gi...@apache.org> on 2021/09/24 19:46:25 UTC

[GitHub] [solr-operator] HoustonPutman opened a new issue #327: Investigate listening on GCSRepository Secrets

HoustonPutman opened a new issue #327:
URL: https://github.com/apache/solr-operator/issues/327


   If a user is connecting to a GCS Backup Repository, then they have to provide a secret that contains the GCS credentials as a file. We should investigate whether we need to restart the Solr Pod if this GCS credential is updated.
   
   The `gcs-repository` implementation might re-load the credentials everytime it is used. If that's the case, then the [Secrets _should_ be auto-updated by kubernetes within the Pod](https://kubernetes.io/docs/concepts/configuration/secret/#mounted-secrets-are-updated-automatically), so we won't have to restart the Pods.
   
   If the `gcs-repository` does not reload the credentials ever, then we will need to restart the Solr Pods to propagate the new credentials values. This can be done by setting a hash of the secret value as an annotation for the Pod. We do it for other secrets, we might just need to make the current logic more generic to accept more secrets.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org


[GitHub] [solr-operator] HoustonPutman commented on issue #327: Investigate listening on GCSRepository Secrets

Posted by GitBox <gi...@apache.org>.
HoustonPutman commented on issue #327:
URL: https://github.com/apache/solr-operator/issues/327#issuecomment-926879982


   Relates to #301 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org


[GitHub] [solr-operator] HoustonPutman commented on issue #327: Investigate listening on GCSRepository Secrets

Posted by GitBox <gi...@apache.org>.
HoustonPutman commented on issue #327:
URL: https://github.com/apache/solr-operator/issues/327#issuecomment-926883767


   @gerlowskija , I think you know the `gcs-repository` code the best. Once you are back (don't want to interrupt your break), could you look into this and see whether the credentials are re-loaded throughout the solr lifecycle or just when the GCSRepository is used for the first time.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org