Skip to content

feature request: add in-memory cache for entry list #705

Description

@zzzz465

Problem

When running large clusters, calling ListEntries on every reconcile is not really practical, especially when multiple controller managers are connected to a single SPIRE Server cluster.

A nested SPIRE Server setup could be one possible solution, but adding a cache mechanism to spire-controller-manager seems much simpler.
(#663 related to this maybe?)

for context, our largest Kubernetes cluster has around 30k pods in a single cluster, and roughly 300k–500k entries are registered in SPIRE Server in total.

Proposed Solution

  • implement in-memory caching mechanism to avoid listing all entries when reconciling
  • these features might work well if it's used together

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions