virtual-kubelet / azure-aci

Things related to Azure Container Instances for Virtual Kubelet
Apache License 2.0
92 stars 71 forks source link

what is the procedure in place to update the certificate that component uses? #140

Open eugen-nw opened 3 years ago

eugen-nw commented 3 years ago

The above https://docs.microsoft.com/en-us/azure/aks/virtual-nodes article does not address our particular issue. We are running Windows containers so we need to install https://github.com/virtual-kubelet/azure-aci in order to run them. My original question was what is the procedure in place to update the certificate that component uses before/when it expires without having to remove and reinstall the component.

Originally posted by @eugen-nw in https://github.com/virtual-kubelet/azure-aci/issues/96#issuecomment-804148046

gossion commented 3 years ago

if you mean SP expiration, how about using managedidentity? https://github.com/virtual-kubelet/azure-aci/blob/v1.3.5/helm/templates/deployment.yaml#L50

if you mean cert auto rotate, we don't have a plan yet.

helayoty commented 2 years ago

@eugen-nw Would you please provide more info? managed identity is supported now.