Separate out CloudSQL Proxy - Githubissues

forseti-security / helm-charts

Apache License 2.0

8 stars 11 forks source link

Separate out CloudSQL Proxy #49

Closed kevensen closed 4 years ago

kevensen commented 4 years ago

This will support

Long term - flexible architectures
Short term - db_migrator

Why is this necessary? With Forseti on-GCE, the db_migrator.py script runs after the cloud_sql_proxy service has started. As it stands with Forseti on-GKE (FKE or FGKE?) The cloudsql-proxy container starts with the forseti-server container.

What we will do is make the db_migrator.py an initContainer in the forseti-server pod that will keep failing and restarting until the cloudsql-proxy pod is up and running. Only when it succeeds will the forseti-server container be allowed to start.

kevensen commented 4 years ago

/gcbrun

kevensen commented 4 years ago

/gcbrun

kevensen commented 4 years ago

/gcbrun

kevensen commented 4 years ago

/gcbrun