-
Notifications
You must be signed in to change notification settings - Fork 84
add flag for reading pods from kube-apiserver cache #3064
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
30cce25 to
dbb4a12
Compare
|
Is there a good reason not to make this default? Another thing I've recently been thinking about, we already have a trigger where we list pods when we don't have metadata. What if we used the kubelet's local pods endpoint instead of hitting the apiserver at all? |
I believe that's even better by using kubelet's local pods. Shall we do this in a another pr? |
|
Sounds good to me! |
|
Just realize that to query kubelet API proper configuration for authentication & authorization are required. I will craft a draft first and let's see. |
|
Btw, can we merge this pr first? |
This is a successor for #3064 The method used in this PR is from crictl: https://github.com/kubernetes-sigs/cri-tools/blob/master/cmd/crictl/pod_stats.go The upgrade for selinux and containerd fixes CVE-2025-52881 and CVE-2024-25621 , respectively.
Current listing of pods can go to etcd directly without hitting cache in apiserver. Adding an optional flag to reduce the load on etcd side by setting
resourceVersion=0.