-
Notifications
You must be signed in to change notification settings - Fork 27
Description
Today ceph-csi is heavily dependent on the kubernetes sidecar to provide the secrets we have faced this problem multiple times where we needed to change the secrets or where we need to add the additional secrets to all the classes.
This is a feature request to solve the secret override or missing secret problem with ceph-csi without affecting the upgrade. Because we cannot add the additional secrets to the kubernetes PV objects as they are immutabe nor it can be changed as well.
In ClientProfile we are going to expose a set of fields where admin can specify the secrets details per clusterID/profile and cephcsi is going get the secret from kubernetes and use that secret to talk to ceph.
This will solve most of the problem we have with secrets.