edgexfoundry / edgexfoundry/edgex-helm

helm deployment: Eliminate shared wrapper scripts RWX volume

Open
#12 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Mustache
Stars
7
Forks
8
PR merge metrics
No merged PRs in 30d

Description

In the current implementation, wrapper scripts initialized by security-bootstrapper are mounted into an RWX volume, and EdgeX containers use these wrapper scripts to replace the container entrypoints.

A better solution would be to install these wrappers as secrets, configmaps, or init-containers, in order to remove the depenency on the shared RWX volume.

See an example of this:
https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-initialization/

Contributor guide

Open the contributing guide

Research direction

Start by tracing how security-bootstrapper initializes wrapper scripts and how the Helm deployment mounts them into EdgeX containers. Compare the current shared RWX-volume flow with the Kubernetes pod-initialization example; done means the wrappers are delivered without that shared volume while the container entrypoints still work.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, kubernetes
Domain
devops, infrastructure
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.