Commits on May 13, 2020

1. operator: remove pod list of an entire cluster …

   Doing a pod list every 30 minutes can be brutal for kube-apiserver,
   specially if it is not running with a limit of the number of pods that
   should be returned. Having a watcher that receives notifications for the
   pods running as well as the CEPs, is enough to provide a GC for
   Cilium Identities and CEPs.
   
   Since we have a k8s watcher and the CEPs have an owner set to
   themselves the CEP GC interval was decreased to 5 minutes.
   
   Also, given that we don't depend on the CEP GC to perform Cilium Identity
   GC we can set the identity heartbeat timeout to 2* the KVStore Lease TTL.
   
   Signed-off-by: André Martins <andre@cilium.io>

   

   aanm committed May 13, 2020
   Copy the full SHA

   29f49b0 View commit details

   Browse the repository at this point in the history