From c9d518471891fd5d5fb2167c2c007f41e6b27952 Mon Sep 17 00:00:00 2001 From: Michael DePouw Date: Thu, 11 Jan 2024 16:32:23 -0500 Subject: [PATCH 1/2] Make link to Reloader a link Update secret-auto-rotation.md --- docs/book/src/topics/secret-auto-rotation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/book/src/topics/secret-auto-rotation.md b/docs/book/src/topics/secret-auto-rotation.md index a101b8686..cd3ab35b9 100644 --- a/docs/book/src/topics/secret-auto-rotation.md +++ b/docs/book/src/topics/secret-auto-rotation.md @@ -10,7 +10,7 @@ Depending on how the application consumes the secret data: 1. **Mount Kubernetes secret as a volume:** Use auto rotation feature + Sync K8s secrets feature in Secrets Store CSI Driver, application will need to watch for changes from the mounted Kubernetes Secret volume. When the Kubernetes Secret is updated by the CSI Driver, the corresponding volume contents are automatically updated. 2. **Application reads the data from container’s filesystem:** Use rotation feature in Secrets Store CSI Driver, application will need to watch for the file change from the volume mounted by the CSI driver. 3. **Using Kubernetes secret for environment variable:** The pod needs to be restarted to get the latest secret as environment variable. - 1. Use something like https://github.com/stakater/Reloader to watch for changes on the synced Kubernetes secret and do rolling upgrades on pods + 1. Use something like [https://github.com/stakater/Reloader]([url](https://github.com/stakater/Reloader)) to watch for changes on the synced Kubernetes secret and do rolling upgrades on pods ## Enable auto rotation From e35a24736dffa267322de99195c3d72c49f0e3c4 Mon Sep 17 00:00:00 2001 From: Michael DePouw Date: Fri, 12 Jan 2024 09:27:42 -0500 Subject: [PATCH 2/2] Update docs/book/src/topics/secret-auto-rotation.md Co-authored-by: Anish Ramasekar --- docs/book/src/topics/secret-auto-rotation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/book/src/topics/secret-auto-rotation.md b/docs/book/src/topics/secret-auto-rotation.md index cd3ab35b9..a32cb574c 100644 --- a/docs/book/src/topics/secret-auto-rotation.md +++ b/docs/book/src/topics/secret-auto-rotation.md @@ -10,7 +10,7 @@ Depending on how the application consumes the secret data: 1. **Mount Kubernetes secret as a volume:** Use auto rotation feature + Sync K8s secrets feature in Secrets Store CSI Driver, application will need to watch for changes from the mounted Kubernetes Secret volume. When the Kubernetes Secret is updated by the CSI Driver, the corresponding volume contents are automatically updated. 2. **Application reads the data from container’s filesystem:** Use rotation feature in Secrets Store CSI Driver, application will need to watch for the file change from the volume mounted by the CSI driver. 3. **Using Kubernetes secret for environment variable:** The pod needs to be restarted to get the latest secret as environment variable. - 1. Use something like [https://github.com/stakater/Reloader]([url](https://github.com/stakater/Reloader)) to watch for changes on the synced Kubernetes secret and do rolling upgrades on pods + 1. Use something like [Reloader](https://github.com/stakater/Reloader) to watch for changes on the synced Kubernetes secret and do rolling upgrades on pods ## Enable auto rotation