opensearch-project/opensearch-k8s-operator

[FEATURE] setting dashboard annotations on deployment level

Opened this issue · 3 comments

Is your feature request related to a problem?

I like to auto restart my dashboard on secret changes.
To do this annotations I like to have be set on deployment level. Right now it is done on pod level.

What solution would you like?

What alternatives have you considered?

adding some kind extra config options to do this

Do you have any additional context?

https://github.com/opensearch-project/opensearch-k8s-operator/pull/557/files
Support annotations on StatefulSet #557 this issue has solved the same problem for nodes

[Triage]
Hey @360build please correct me if i'm wrong, you are referring to have the pod restart once the opensearchCredentialsSecret secret is updated (if so which is already the case) or to restart if the secret value is updated inside admin-credentials-secret ?

  dashboards:
    opensearchCredentialsSecret:
      name: admin-credentials-secret

@swoehrl-mw @salyh @getsaurabh02

Hi, thank you for you response

It is indeed correct that on secret change for admin credentials the dashboard will reload by itself.

The only thing is that I have mounted and added some extra secrets. And I want to reload the dashboard when one of these is changing.
I would like to do this with a secret reloaded. This one will require me to set a annotation on the the deployment. But the provider only allows me to set annotations on the pod.

With this no restart get triggered on secret change

The certmanager documentation recommends people to use this when syncing various configurations with their workloads:
https://github.com/wave-k8s/wave

I haven't tried out though. But i'm looking for a solution on how to auto-update the secrets / certs as well.