Skip to content

Commit

Permalink
auth: re-enable node-based auth map gc
Browse files Browse the repository at this point in the history
This commit re-enables the node-based auth map garbage collection which
have been temporarily disabled with #26073.

Signed-off-by: Marco Hofstetter <marco.hofstetter@isovalent.com>
  • Loading branch information
mhofstetter authored and joestringer committed Jun 15, 2023
1 parent 0ecc1ef commit a824c71
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions pkg/auth/cell.go
Original file line number Diff line number Diff line change
Expand Up @@ -159,6 +159,11 @@ func registerGCJobs(jobGroup job.Group, mapGC *authMapGarbageCollector, params a
jobGroup.Add(job.Observer[resource.Event[*ciliumv2.CiliumIdentity]]("auth identities gc", mapGC.handleCiliumIdentityEvent, params.CiliumIdentities))
}

// Add node based auth gc if k8s client is enabled
if params.CiliumNodes != nil {
jobGroup.Add(job.Observer[resource.Event[*ciliumv2.CiliumNode]]("auth nodes gc", mapGC.handleCiliumNodeEvent, params.CiliumNodes))
}

jobGroup.Add(job.Timer("auth expiration gc", mapGC.CleanupExpiredEntries, params.Config.MeshAuthExpiredGCInterval))
}

Expand Down

0 comments on commit a824c71

Please sign in to comment.