Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Identity Controller Boilerplate #50

Merged
merged 3 commits into from
Aug 16, 2024
Merged

Identity Controller Boilerplate #50

merged 3 commits into from
Aug 16, 2024

Conversation

spjmurray
Copy link
Member

At present, when provisioning in a cluster, it blocks a long time waiting for OpenStack to do what it needs to do. This has a knock on effect for UX in that said delay is visible in the UI and CLI tools. This lays down the groundwork to make this asychronous so we don't hold up uer interaction, but we do cluster provisioning. This is a template also for phyiscal network provisioning that takes even longer, and causes request timeouts that need to be avoided.

At present, when provisioning in a cluster, it blocks a long time
waiting for OpenStack to do what it needs to do.  This has a knock on
effect for UX in that said delay is visible in the UI and CLI tools.
This lays down the groundwork to make this asychronous so we don't hold
up uer interaction, but we do cluster provisioning.  This is a template
also for phyiscal network provisioning that takes even longer, and
causes request timeouts that need to be avoided.
This makes identity provisioning asynchronous and idempotent, which is
far more fault tolerant and can hide long provisioning times better at
the front end - the cost just disappears into cluster provisioning.  Two
very important things to note, first the openstack configuration should
live in a separate CR, second we've now got a problem in that the
kubernetes service needs to poll for provisioning, which cannot be done
without a token...
@spjmurray spjmurray force-pushed the identity_controller branch 6 times, most recently from 314fec8 to f86b65e Compare August 16, 2024 08:26
As previously commented, having openstack state in a controlled
resource is a bad idea. This separates stuff out so that a shadow record
is created to hold state, so the managed resource is not required to be
updated.
@spjmurray spjmurray merged commit 679a909 into main Aug 16, 2024
2 checks passed
@spjmurray spjmurray deleted the identity_controller branch August 16, 2024 08:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant