jcw90210
Joined 11 years ago
Karma
5
Submissions
4
Member since
Sep 26
Joined 11 years ago
Personally I think that this kind of workload is better off not being tied too much into kubernetes. I've worked with crossplane and other controller who put a lot of load on the k8s-apiserver and etcd and can easily slow the whole machinery down / grind them to a halt.
btw, agent-substrate is in the process of being moved to CNCF: https://github.com/cncf/sandbox/issues/523
I believe the substrate egress-gateway needs to handover the internal SPIFFE one to an external system (e.g. Entra Agent ID). Not sure if that should be part of substrate or kagent/ax/..