edgexfoundry / edgexfoundry/edgex-helm
helm deployment: Eliminate shared wrapper scripts RWX volume
- Dominant language
- Mustache
- Stars
- 7
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
In the current implementation, wrapper scripts initialized by security-bootstrapper are mounted into an RWX volume, and EdgeX containers use these wrapper scripts to replace the container entrypoints.
A better solution would be to install these wrappers as secrets, configmaps, or init-containers, in order to remove the depenency on the shared RWX volume.
See an example of this:
https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-initialization/
Contributor guide
Research direction
Start by tracing how security-bootstrapper initializes wrapper scripts and how the Helm deployment mounts them into EdgeX containers. Compare the current shared RWX-volume flow with the Kubernetes pod-initialization example; done means the wrappers are delivered without that shared volume while the container entrypoints still work.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- helm, kubernetes
- Domain
- devops, infrastructure
- Issue type
- Refactor
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100