Uploaded image for project: 'Couchbase Kubernetes'
  1. Couchbase Kubernetes
  2. K8S-1168

Stop Using pods/exec

    XMLWordPrintable

Details

    • 3

    Description

      From a security perspective being able to exec onto a pod means you could do myriad harm, downloading botnets etc.  Naturally some users assume our use is malign and don't want us to do it which effectively breaks the product... Essentially our readiness checks need to be over HTTP, the easiest way to pull this off is with a sidecar that surfaces the HTTP port, the operator will need to toggle ready/unready on this sidecar based on whether the cluster can tolerate a pod going down - "will the cluster recover back to its original state if I blow something up?"

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            simon.murray Simon Murray
            simon.murray Simon Murray
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty