dragonflydb / dragonflydb/dragonfly-operator
Updating acl secret does not update ACL LIST
- Dominant language
- Go
- Stars
- 357
- Forks
- 111
- PR merge metrics
- No merged PRs in 30d
Description
If the secret which is used for the ACL (via aclFromSecret) is updated then the `ACL LIST` remains the same until `ACL LOAD` is called.
There's no way of knowing outside of the pod when the secret has been propagated to within the pod so `ACL LOAD` does not do anything if called at the wrong time. Additionally, if you have multiple replicas then calling `ACL LOAD` won't do anything for the replicas.
Is there a way of adding an option such that if the acl config file is updated then the pod automatically calls `ACL LOAD`?
Contributor guide
Research direction
Trace how aclFromSecret is handled in the operator and how Kubernetes Secret updates reach managed pods. Check the behavior around ACL LOAD, including multiple replicas, and identify the existing reconciliation or watch entry point. Done means an ACL configuration update reliably causes every replica to load the new ACL without manual intervention.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes, redis
- Domain
- infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100