lhotari commented on issue #598:
URL: 
https://github.com/apache/pulsar-helm-chart/issues/598#issuecomment-2916278110

   slightly related to 
https://github.com/apache/pulsar-helm-chart/issues/359#issuecomment-2913204154 .
   I'd like to get rid of keytool.sh completely for the typical use case of a 
single certificate file.
   
   > Update keytool.sh to load those external certificates to the trustore.
   > 
   > I don't know yet how to restart the pod when one certificate file is 
updated
   
   For multiple certs, one option would be to have a background job poll file 
paths and trigger when the certificate files change to combine them into a 
single file. This background job could be started in the container command. To 
keep it lightweight, it could be a plain bash script or Python script. There 
isn't a need to restart the pod since Pulsar, BookKeeper and ZooKeeper support 
reloading the keystore and truststore files when it changes.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to