Clarify changelog entry for v0.10.0: "Add Kubernetes Client QPS and Burst Configuration"

Hi,

While reviewing the changelog for the new Vault Secrets Operator (VSO) release v0.10.0, one of the entries simply reads:

“Add Kubernetes Client QPS and Burst Configuration”

After reading PR #1013, it’s clear this change addresses a specific problem:

“In clusters with many VaultStaticSecrets, the default Kubernetes client QPS of 5 and Burst of 10 is insufficient, leading it to throttle its communications with the Kubernetes API. This can cause brand-new deployments to roll out very slowly as their pods wait for their Kubernetes secrets to be created from their VaultStaticSecrets.”

This is really useful context, but it’s missing entirely from the release notes. From a user perspective, it would be helpful if the changelog explained:

  • What problem the QPS/Burst setting solves,
  • In what scenarios it might matter (e.g., clusters with 100+ VaultStaticSecrets)

Were any performance tests run to clarify what “many VaultStaticSecrets” means in practice?

Thanks in advance

1 Like