Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: Reload registry TLS certificate when it is updated on the file system #805

Merged
merged 3 commits into from
Nov 11, 2024

Conversation

dlipovetsky
Copy link
Contributor

Watch the filesystem for changes to the certificate, and reload when it is updated.

Introduces a dependency on https://pkg.go.dev/sigs.k8s.io/controller-runtime/pkg/certwatcher. This does not appear to impact the executable size.

The first commit is a test. On its own, it fails. With the fix in the second commit, the test passes.

Fixes #803

(Note: This is stacked on #804)

dkoshkin
dkoshkin previously approved these changes Nov 9, 2024
Copy link
Contributor

@dkoshkin dkoshkin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the separate commits and messages, made it much simpler to understand the changes.

docker/registry/registry.go Outdated Show resolved Hide resolved
docker/registry/registry.go Show resolved Hide resolved
@jimmidyson jimmidyson force-pushed the repository-reload-certificate branch 3 times, most recently from 75ac1f0 to 9e7d960 Compare November 11, 2024 15:20
@jimmidyson
Copy link
Contributor

Thank you!

@jimmidyson jimmidyson merged commit 26203e6 into mesosphere:main Nov 11, 2024
9 checks passed
jimmidyson pushed a commit that referenced this pull request Nov 11, 2024
🤖 I have created a release *beep* *boop*
---


## 1.17.0 (2024-11-11)

<!-- Release notes generated using configuration in .github/release.yaml
at main -->

## What's Changed
### Exciting New Features 🎉
* feat: Add images and demo script for in-cluster registry by
@jimmidyson in #801
* feat: Build with go 1.23.3 and upgrade all tools by @jimmidyson in
#808
### Fixes 🔧
* fix: Allow TLS to pull chart from OCI repository by @dlipovetsky in
#804
* fix: Reload registry TLS certificate when it is updated on the file
system by @dlipovetsky in
#805

## New Contributors
* @dlipovetsky made their first contribution in
#804

**Full Changelog**:
v1.16.0...v1.17.0

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: mesosphere-actions-pr-bot[bot] <157582460+mesosphere-actions-pr-bot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
3 participants