dragonflydb / dragonflydb/dragonfly-operator

Updating acl secret does not update ACL LIST

Open
#319 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
357
Forks
111
PR merge metrics
No merged PRs in 30d

Description

If the secret which is used for the ACL (via aclFromSecret) is updated then the `ACL LIST` remains the same until `ACL LOAD` is called.

There's no way of knowing outside of the pod when the secret has been propagated to within the pod so `ACL LOAD` does not do anything if called at the wrong time. Additionally, if you have multiple replicas then calling `ACL LOAD` won't do anything for the replicas.

Is there a way of adding an option such that if the acl config file is updated then the pod automatically calls `ACL LOAD`?

Contributor guide

Open the contributing guide

Research direction

Trace how aclFromSecret is handled in the operator and how Kubernetes Secret updates reach managed pods. Check the behavior around ACL LOAD, including multiple replicas, and identify the existing reconciliation or watch entry point. Done means an ACL configuration update reliably causes every replica to load the new ACL without manual intervention.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes, redis
Domain
infrastructure, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.