Parameterize config watcher loop speed

[connorkuehl]

This loop spins really quickly otherwise. This will allow cluster operators to choose how quickly the thin plugin reconciles the kubeconfig in the event of a stale service account token.

[s1061123]

Thank you for the PR, @connorkuehl

Currently multus thin_entrypoint assumes that Kubeconfig is not updated by deployment because this modification might be reverted again when cert is rotated. Hence thin_entrypoint supports only 'generated Kubeconfig without mody out-of-band' and thin_entrypoint does not support 'Kubeconfig with modify out-of-band'.

[connorkuehl]

@s1061123 Ha, yeah, I was trying to test the Kubeconfig regeneration when the service account token changes but I couldn't figure out how to manually rotate the service account token, so I figured I could test by mutating the Kubeconfig and making sure that it did regenerate properly.

If I drop that patch, would you still consider the patch that parameterizes how quickly the loop executes?

[connorkuehl]

@s1061123 I dropped the kubeconfig hashing patch. Would you be willing to consider the remaining patch for controlling how quickly the loop spins?

[dougbtv]

can we keep the default second wait? if we'd like to we can update the sample daemonset to include the minute long wait

also let's update the docs/how-to-use.md and/or docs/configuration.md to reflect the option as well

[coveralls]

coverage: 62.975% (+0.2%) from 62.778%
when pulling d2d1bb2 on connorkuehl:stale-kubeconfig-hash
into 0fd3fa7 on k8snetworkplumbingwg:master.

[connorkuehl]

can we keep the default second wait? if we'd like to we can update the sample daemonset to include the minute long wait

also let's update the docs/how-to-use.md and/or docs/configuration.md to reflect the option as well

Sure thing! I've pushed a new revision setting the default value to 1 second and also added to the how-to-use.md. Thanks for the review 🙂

[dougbtv]

LGTM! Appreciate the contribution.

[connorkuehl]

Thanks, @dougbtv! It looks like the CI failure is unrelated to the PR. Would you mind retriggering it?

edit: rebased

[dougbtv]

Thanks for the updates!

[connorkuehl]

@dougbtv @s1061123 just checking to see if either of you had any other feedback on the patch

[mingshuoqiu]

@dougbtv @s1061123 gentle ping. Do you still have any concern to merge the PR?

[mingshuoqiu]

@dougbtv @s1061123 gentle ping. Do I need anyone else to review to speed up the merge progress? Thanks