mirror of https://github.com/linkerd/linkerd2.git
The validating webhook admission controller in the policy controller loads it's TLS credentials from files at startup and uses them for the lifetime of the process. This means that if the credentials are rotated, the admission controller will not use the updated credentials until the process is restarted. We instead load these credentials each time a connection is established so that new connections will always use the newest credentials. In doing so, we remove warp and instead create a hyper server manually. Fixes #7519 |
||
---|---|---|
.. | ||
core | ||
grpc | ||
k8s | ||
src | ||
.dockerignore | ||
Cargo.toml | ||
amd64.dockerfile | ||
arm.dockerfile | ||
arm64.dockerfile |