Problem: creating the one-off container to create the certificate adds complexity and is a bit slow.
Solution: have the certificate generation done by the operator via zeromq. The tradeoff is the size of the operator image, but it is probably worth it
This will address #150 ! It's not the CSI (and I will continue to play with that idea, but likely for other features to add here).
I haven't run tests locally, so I'll check these (and do some benchmarks) after dinner. I ran a quick job to test, and it seemed to work and was over faster than I could check! So maybe that's good :)
The biggest challenge for the build was that the controller-gen doesn't really know how to accept an external library to link to (or more properly, I don't know how to provide it). I posted this question in the slack (no response yet) and can update the code here with a better solution if there is one. What we do is a hack - defining the function in a dummy keygen.go, and then (at build time) replacing that file with the template.
Problem: creating the one-off container to create the certificate adds complexity and is a bit slow. Solution: have the certificate generation done by the operator via zeromq. The tradeoff is the size of the operator image, but it is probably worth it
This will address #150 ! It's not the CSI (and I will continue to play with that idea, but likely for other features to add here).
I haven't run tests locally, so I'll check these (and do some benchmarks) after dinner. I ran a quick job to test, and it seemed to work and was over faster than I could check! So maybe that's good :)
The biggest challenge for the build was that the controller-gen doesn't really know how to accept an external library to link to (or more properly, I don't know how to provide it). I posted this question in the slack (no response yet) and can update the code here with a better solution if there is one. What we do is a hack - defining the function in a dummy keygen.go, and then (at build time) replacing that file with the template.
back after some foods! :avocado: