search

k8snetworkplumbingwg / multus-cni

A CNI meta-plugin for multi-homed pods in Kubernetes
Apache License 2.0
2.27k stars 577 forks source link

What's the proper way to rotate the multus kubeconfig for multus 3.7 #1263

Open lubronzhan opened 2 months ago

lubronzhan commented 2 months ago

Discussed in https://github.com/k8snetworkplumbingwg/multus-cni/discussions/1262

Originally posted by **lubronzhan** April 16, 2024 We is still using old multus, without the thick image, as mentioned here https://github.com/k8snetworkplumbingwg/multus-cni/issues/852. So if the kubeconfig of multus expires, the multus will fail to connect to apiserver to update pod info. Question, what's the proper way to rotate the token for now? restarting multus pod + pod that needs the second nic? We will try upgrade to thick image later. Thank you
dougbtv commented 1 month ago

Here's an example for you: https://github.com/openshift/multus-cni/blob/master/images/entrypoint.sh#L502-L508

But, it could maybe be patched in the release-v3 branch