gulecroc commented on issue #598: URL: https://github.com/apache/pulsar-helm-chart/issues/598#issuecomment-2949003937
> The main challenge to solve would be to start a background job (bash script) to watch for the individual certificate files and when any of them change, update the combined PEM bundle file (which is just simple done by concatenating all individual CA files into one file). The configuration of component's trusted certs would just point to the bundle file and the component (broker, zookeeper, bookie) would reload the changes when the file changes. When you say "the component could reload the changes when the file changes" : do we need to restart pod or not ? Maybe we could use a cronjob to update the combined PEM ? Or you prefer a sidecar with a background process ? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
