XW512 commented on issue #8067: URL: https://github.com/apache/apisix/issues/8067#issuecomment-1573043355
> my data_plane config: > > ```yaml > apisix: > ssl: > ssl_trusted_certificate: t/certs/mtls_ca.crt > deployment: > role: data_plane > role_data_plane: > config_provider: control_plane > control_plane: > host: > - "https://admin.apisix.dev:9280"; > timeout: 30 > prefix: "/apisix" > ``` > > NOTE: > > ``` > apisix: > ssl: > ssl_trusted_certificate: t/certs/mtls_ca.crt > ``` > > ssl_trusted_certificate set the CA cert that issued the cert of conf_server in the control plane. > > my control_plane config: > > ```yaml > deployment: > role: control_plane > role_control_plane: > config_provider: etcd > conf_server: > listen: 0.0.0.0:9280 > cert: t/certs/mtls_server.crt > cert_key: t/certs/mtls_server.key > admin: > allow_admin: > - 0.0.0.0/0 > admin_key: > - name: admin > key: edd1c9f034335f136f87ad84b625c8f1 # using fixed API token has security risk, please update it when you deploy to production environment > role: admin > ``` > > cat /etc/hosts: > > ``` > 10.211.55.4 admin.apisix.dev > ``` > > `10.211.55.4` is the IP of control plane, and `admin.apisix.dev` is the Common Name of `mtls_server.crt`. Hello, according to your configuration, I found that the data of the CP node has been modified, but the DP node did not automatically pull the latest configuration. If the configuration data is the latest after restarting the DP node, is it not quasi real-time to synchronize to the DP node? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
