Azure / secrets-store-csi-driver-provider-azure

Azure Key Vault provider for Secret Store CSI driver allows you to get secret contents stored in Azure Key Vault instance and use the Secret Store CSI driver interface to mount them into Kubernetes pods.
https://azure.github.io/secrets-store-csi-driver-provider-azure/
MIT License
432 stars 191 forks source link

Avoid requesting the same secret more than once #1609

Open alonstern opened 6 days ago

alonstern commented 6 days ago

Hi,

I have a k8s cluster with a few thousands pods, which all use the same secrets. The CSI driver make a number of secrets * number of pods requests to the keyvault. This causes some issues where the Keyvault is throttling, and the CSI driver does not handle it well and my pods gets into a restart-loop.

Is there a way to configure the CSI driver such that each secret will be requested once and not per pod?