Skip to content

[v17] Reduce resource consumption when generating Kubernetes certificates #52146

Merged
rosstimothy merged 1 commit intobranch/v17from
tross/backport-52109/v17
Feb 20, 2025
Merged

[v17] Reduce resource consumption when generating Kubernetes certificates #52146
rosstimothy merged 1 commit intobranch/v17from
tross/backport-52109/v17

Conversation

@rosstimothy
Copy link
Copy Markdown
Contributor

Backport #52109 to branch/v17

Changelog: Improve latency and reduce resource consumption of generating Kubernetes certificates via tctl auth sign and tsh kube login.

…52109)

Closes #52073.

The requested Kubernetes cluster is now cross referenced with the
KubeServers in the unified resource cache. This results in a
reduction in CPU, memory, and cert generation latency. This also
cleans up some of the helper functions in lib/kube/utils that
were no longer needed, and suboptimal.

The client side changes here shouldn't have any impact, as the
server is performing the same check, and returning the equivalent
error the client side code used to. This will also cut the time
of `tctl auth sign` in half as both the client and server were
performing the same expensive CheckKubeCluster operation.
@rosstimothy rosstimothy marked this pull request as ready for review February 13, 2025 21:34
@github-actions github-actions Bot requested review from avatus and tigrato February 13, 2025 21:34
@github-actions github-actions Bot added kubernetes-access size/sm tctl tctl - Teleport admin tool tsh tsh - Teleport's command line tool for logging into nodes running Teleport. labels Feb 13, 2025
@rosstimothy rosstimothy added this pull request to the merge queue Feb 20, 2025
Merged via the queue into branch/v17 with commit 9051675 Feb 20, 2025
@rosstimothy rosstimothy deleted the tross/backport-52109/v17 branch February 20, 2025 20:31
@fheinecke fheinecke mentioned this pull request Feb 25, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport kubernetes-access size/sm tctl tctl - Teleport admin tool tsh tsh - Teleport's command line tool for logging into nodes running Teleport.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants