Files
releases/test/e2e/certrefresh/testdata/server-cert.pem
T
Stephan Renatus cc4816eded server+runtime: add TLS cert refreshing (#4107)
This adds a new flag to `opa run`, intended for server usage with HTTPS listeners:
`--tls-cert-refresh-period`. If used with a positive duration, such as "5m" (5 minutes),
"24h", etc, the server will track the certificate and key files' contents. When their
content changes, the certificates will be reloaded.

On an error in reloading, it will log (info) the error and try again in the next round.

Fixes #2500.

Signed-off-by: Stephan Renatus <stephan.renatus@gmail.com>
2021-12-09 10:13:14 +01:00

19 lines
1.1 KiB
Plaintext

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----