Skip to content
This repository has been archived by the owner on Sep 2, 2022. It is now read-only.

Add flinkPropertiesSecret for supporting secret properties #449

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

devholic
Copy link

@devholic devholic commented May 12, 2021

Background

Add possibilities for mounting secret properties from Secret.

Resolves #383

Implementation strategy

As @shashken described at #383 (comment),

Use flinkPropertiesSecret option in CRD and mount the entire properties into a Secret like @functicons suggested.

  • If flinkPropertiesSecret set,
    • Create the config directory to be an emptyDir with a memory medium.
    • Create an init container that copies config files in ConfigMap to config directory since mounting specific file from emptyDir is not possible.
    • Write secrets to /opt/flink/conf/flink-conf.yaml
    • Config directory will be readonly mounted to main containers as same as current ConfigMap implementation.
  • Or not, mount ConfigMap as config volume like as-is.

Limitations

@devholic devholic changed the title Secret properties Add flinkPropertiesSecret for supporting secret properties May 12, 2021
@devholic devholic force-pushed the secret-properties branch from 429c19a to b147dc2 Compare May 18, 2021 03:18
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Mount sensitive Flink Properties as Secrets
1 participant