search

zalando-incubator / kube-aws-iam-controller

Distribute different AWS IAM credentials to different pods in Kubernetes via secrets.
MIT License
158 stars 18 forks source link

Remove the legacy podwatch code #73

Closed mikkeloscar closed 6 months ago

mikkeloscar commented 6 months ago

The podwatcher code is not used since a long time. It was introduced in the initial implementation before AWSIAMRole resources existed. Back then the controller watched the pods to check for role requirements, but in the current implementation it just looks at the AWSIAMRoles to reconcile what secrets need to be created/updated/removed.

Zalando ran without access to list pods for a long time, so the podWatcher code is really not needed.

katyanna commented 6 months ago

:+1:

mikkeloscar commented 6 months ago

:+1: