You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Now we have three methods to get auth for nydusd. For the k8s scenario, the best solution is to get imagePullSecret directly from the API server if nydus-snapshotter is running on the node. Currently the kubeconfig-based-authentication uses List to synchronise secrets for all namespaces, which is stressed and unacceptable for API server.
But we cannot change it to Get now, because snapshotter has no chance to get the pod.Namespace and pod.Spec.imagePullSecret.Name.
The text was updated successfully, but these errors were encountered:
sctb512
changed the title
Change List to to Get when sync imagePullSecret from API server
Change List to Get when sync imagePullSecret from API server
Jul 25, 2023
Now we have three methods to get auth for
nydusd
. For the k8s scenario, the best solution is to get imagePullSecret directly from the API server ifnydus-snapshotter
is running on the node. Currently the kubeconfig-based-authentication uses List to synchronise secrets forall
namespaces, which is stressed and unacceptable for API server.But we cannot change it to
Get
now, becausesnapshotter
has no chance to get thepod.Namespace
andpod.Spec.imagePullSecret.Name
.The text was updated successfully, but these errors were encountered: