Mailu / helm-charts

Development repo for helm charts
126 stars 130 forks source link

mailu-front: using reloader on k8s #330

Closed christf closed 6 months ago

christf commented 9 months ago

When using mailu on kubernetes via this helm chart, it is helpful to get cert-manager to renew certificates. This works even on split-horizon dns setups when configuring cert-manager to use external DNS.

However due to the way to certificates are used, after renewal, the mailu-front pod requires a restart. A common way of executing restarts of pods after secrets have changed is https://github.com/stakater/Reloader

Using reloader hinges on the deployment having a specific annotation. At the moment this mailu-chart does not provide the ability to annotate just the deployment of the front containers.

It would be helpful to be able to annotate just the mailu-front deployments such that tools like reloader can ensure automatically renewed certificates are equally automatically used.

The current workaround is to use the commonAnnotations and annotate everything. This has the drawback of much increased scope for reloader. Hosting mail is complicated already and as such it would be best to limit the supporting tools poking at components of mailu as much as possible.

github-actions[bot] commented 7 months ago

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.

christf commented 7 months ago

https://drewdevault.com/2021/10/26/stalebot.html

github-actions[bot] commented 6 months ago

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.

github-actions[bot] commented 6 months ago

This issue was closed because it has been stalled for 5 days with no activity.