Skip to content

Comments

remove kube-rbac-proxy container from deployment#154

Merged
Madhu-1 merged 4 commits intoceph:mainfrom
leelavg:remove-proxy
Mar 5, 2025
Merged

remove kube-rbac-proxy container from deployment#154
Madhu-1 merged 4 commits intoceph:mainfrom
leelavg:remove-proxy

Conversation

@leelavg
Copy link
Contributor

@leelavg leelavg commented Oct 15, 2024

csi-operator is not exporting any metrics exclusively and orchestrated csi already exports metrics on it's own which isn't tunneled through the operator.

kube-rbac-proxy prominently used to authenticate api access to metrics endpoint available on operator (manager) which isn't mandatory for us and this commit removes the same.

note that controller-runtime itself exports some metrics and this commit doesn't bind any port for controller-runtime which disables inbuilt metrics being available.

ref: https://book.kubebuilder.io/reference/metrics-reference

fixes: #119

@leelavg
Copy link
Contributor Author

leelavg commented Oct 15, 2024

Testing:

> k logs ceph-csi-operator-controller-manager-7d64d95794-ww4jb --since 1m | tail -n3
2024-10-15T05:09:18Z    INFO    Starting workers        {"controller": "clientprofile", "controllerGroup": "csi.ceph.io", "controllerKind": "ClientProfile", "worker count": 1}
2024-10-15T05:09:18Z    INFO    Starting workers        {"controller": "clientprofilemapping", "controllerGroup": "csi.ceph.io", "controllerKind": "ClientProfileMapping", "worker count": 1}
2024-10-15T05:09:18Z    INFO    Starting workers        {"controller": "driver", "controllerGroup": "csi.ceph.io", "controllerKind": "Driver", "worker count": 1}

@nb-ohad
Copy link
Collaborator

nb-ohad commented Oct 15, 2024

@leelavg @Madhu-1 I would prefer if we would not just remove the code and configuration but make it optional. I can predict that very soon we will need to reintroduce this to support custom metrics.

@nb-ohad
Copy link
Collaborator

nb-ohad commented Oct 15, 2024

/hold

@Madhu-1
Copy link
Collaborator

Madhu-1 commented Oct 22, 2024

I can predict that very soon we will need to reintroduce this to support custom metrics.

@nb-ohad can you please provide details about it?

@leelavg
Copy link
Contributor Author

leelavg commented Dec 3, 2024

If we can update the kube builder layout to 4.1.0 we can remove the kube-rbac-proxy altogether as per https://book.kubebuilder.io/reference/metrics

@github-actions
Copy link

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in two weeks if no further activity occurs. Thank you for your contributions.

@github-actions github-actions bot added the stale label Feb 10, 2025
@leelavg leelavg force-pushed the remove-proxy branch 3 times, most recently from a5b65ee to 7b1003b Compare February 20, 2025 10:18
csi-operator is not exporting any metrics exclusively and orchestrated
csi already exports metrics on it's own which isn't tunneled through
the operator.

kube-rbac-proxy prominently used to authenticate api access to metrics
endpoint available on operator (manager) which isn't mandatory for us
and this commit removes the same.

note that controller-runtime itself exports some metrics and this commit
doesn't bind any port for controller-runtime which disables inbuilt
metrics being available.

https://book.kubebuilder.io/reference/metrics-reference

Signed-off-by: Leela Venkaiah G <lgangava@ibm.com>
Signed-off-by: Leela Venkaiah G <lgangava@ibm.com>
Signed-off-by: Leela Venkaiah G <lgangava@ibm.com>
Signed-off-by: Leela Venkaiah G <lgangava@ibm.com>
@Madhu-1
Copy link
Collaborator

Madhu-1 commented Feb 25, 2025

@nb-ohad PTAL

@Madhu-1 Madhu-1 requested a review from nb-ohad February 25, 2025 10:17
@Madhu-1 Madhu-1 merged commit df3e813 into ceph:main Mar 5, 2025
13 checks passed
iPraveenParihar pushed a commit to iPraveenParihar/ceph-csi-operator that referenced this pull request Jan 7, 2026
Syncing latest changes from main for ceph-csi-operator
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

remove decprecation warning from logs

3 participants