Currently, the pod is first scheduled by K8s, and then we try to resolve all secrets. For statically provisioned secrets (k8sSearch) this assumes that all secrets have provisioned variants for all nodes.
Kubernetes allows CSI plugins to influence how pods using them are scheduled (https://kubernetes-csi.github.io/docs/topology.html). We should use that to nudge Kubernetes towards scheduling to nodes where those secrets are available.
Currently, the pod is first scheduled by K8s, and then we try to resolve all secrets. For statically provisioned secrets (
k8sSearch) this assumes that all secrets have provisioned variants for all nodes.Kubernetes allows CSI plugins to influence how pods using them are scheduled (https://kubernetes-csi.github.io/docs/topology.html). We should use that to nudge Kubernetes towards scheduling to nodes where those secrets are available.