open-policy-agent / cert-controller

Apache License 2.0
90 stars 39 forks source link

Use "Get" by secret resourcename than "Watch" on all secrets. #24

Open eatwithforks opened 3 years ago

eatwithforks commented 3 years ago

https://github.com/open-policy-agent/cert-controller/blob/master/pkg/rotator/rotator.go#L587-L593

would be less overhead to do a GET on secret by secret-name than watching the full list of secrets

mozillazg commented 3 years ago

+1 for avoid watch and list all secrets.