Comments (3)
@antimack the configmaps that drive the k8s-sidecar-injector
are only ever consumed by the Sidecar Injector - pods themselves never refer to them.
from k8s-sidecar-injector.
Hey @antimack !
Great question - this was an explicit design decision I made when writing the injector initially. My thinking was that: while a technically possible and useful feature, it made me nervous about understandabiliity. Supporting "mixin" injections would be neat, but it becomes much more difficult to understand what the injected pod would look like when you need to union multiple injection configs in your head with your pod spec. Further, I was not sure there was an intuitive way to handle merging injection configs that have overlap (i.e. overlapping and conflicting env vars, volumes with diff mount flags, etc).
Ultimately, I wanted to make sure this was an uninteresting, uncomplicated part of our infrastructure, and not overly clever. We have internal uses that could benefit from multiple injections, but we instead maintain separate config files including the duplication. I have found its easier for new engineers to grok behavior with this design.
:) does that help answer your question?
from k8s-sidecar-injector.
Yes, indeed! Thanks for a quick reply. How do you guys manage ConfigMaps if for example your sidecar refers to them in env variable or volume and they need to be created before?
from k8s-sidecar-injector.
Related Issues (20)
- Status annotation ignores custom annotation namespace HOT 2
- serviceMonitor error HOT 2
- injected pod has no volume and hostPid property HOT 4
- sidercar-configmap namesapces must equal with k8s-sidecar-injector-prod namespace HOT 2
- deployment LOG_LEVEL don't have effect HOT 1
- ServiceAccount Token missing in sidecar HOT 8
- Remove glog
- Feature Request: Add ExecAction to config(map)
- how to config different configmap for different pod in one statefulset HOT 1
- Default injection for all new containers? HOT 2
- sidecar container inject failed on kubernetes 1.14.3 HOT 5
- Question: Being able to inject in kube-system namespace
- Feature request: inject container at the top of the list of containers
- Ignored namespaces aren't skipped for Deployment pods HOT 3
- openshift copy runAsUser form main container
- serviceaccount in sidecar not inject into pod with another serviceaccount
- sidecar injected though no configmap created, therefore init does not come up
- Add default request from namespace annotation HOT 4
- POD not getting sidecar even though injection is requested HOT 3
- cofigmaps have the same name
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from k8s-sidecar-injector.