edgexfoundry / edgexfoundry/edgex-helm

helm deployment: Eliminate pre-shared secrets RWX volumes (require only RWO volumes)

Open
#7 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Mustache
Stars
7
Forks
8
PR merge metrics
No merged PRs in 30d

Description

Current EdgeX deployment on Kubernetes relies on RWX volumes.
- Secrets volume for pre-seeded secret store tokens
- Initialization scripts for security-bootstrapper (#100)
- others?

This RWX requirement forces Kubernetes deployments to rely on network file services such as NFS, large dependencies such as Rook-Ceph, or requires deployment on a single host with a shared host volume.

It would be then easier to use lighter-weight CSI's such as OpenEBS, as well as make it easier to deploy EdgeX in cloud-hosted environments.

Through a combination of making all services using lazy fetching of secret store tokens and other changes, remove the RWX volume requirement from the helm deployment.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.