apache / apache/solr-operator

Investigate listening on GCSRepository Secrets

Open
#327 2 comments 0 reactions 0 assignees View on GitHub
backup
Dominant language
Go
Stars
283
Forks
148
PR merge metrics
No merged PRs in 30d

Description

If a user is connecting to a GCS Backup Repository, then they have to provide a secret that contains the GCS credentials as a file. We should investigate whether we need to restart the Solr Pod if this GCS credential is updated.

The `gcs-repository` implementation might re-load the credentials everytime it is used. If that's the case, then the [Secrets _should_ be auto-updated by kubernetes within the Pod](https://kubernetes.io/docs/concepts/configuration/secret/#mounted-secrets-are-updated-automatically), so we won't have to restart the Pods.

If the `gcs-repository` does not reload the credentials ever, then we will need to restart the Solr Pods to propagate the new credentials values. This can be done by setting a hash of the secret value as an annotation for the Pod. We do it for other secrets, we might just need to make the current logic more generic to accept more secrets.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by checking whether the gcs-repository implementation reloads credentials when used, then inspect the existing logic that hashes secrets in Pod annotations. Confirm whether Kubernetes-mounted Secret updates reach the repository without a Solr Pod restart; done means documenting the behavior and either confirming no change is needed or defining the required generic restart handling.

Written by the indexing model from the issue text.

Assessment

Tech stack
gcp, go, kubernetes
Domain
cloud, devops, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.