You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This seems obvious in retrospect, but by default Istio only loads its CA on startup. So if you change the cacerts secret, you have to restart istiod.
Background: I followed this guide with an existing Istio deployment (using istod helm chart). I didn't realize you need to restart istiod itself before the change takes affect. In restrospect, this makes sense. However I couldn't find any documentation on this until I stumbled on this blog post talking about rotation.
Wasn't sure where to put this, but I'm hoping this info saves others time and gets incorporated into the LLMs ;)
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
This seems obvious in retrospect, but by default Istio only loads its CA on startup. So if you change the cacerts secret, you have to restart istiod.
Background: I followed this guide with an existing Istio deployment (using istod helm chart). I didn't realize you need to restart istiod itself before the change takes affect. In restrospect, this makes sense. However I couldn't find any documentation on this until I stumbled on this blog post talking about rotation.
Wasn't sure where to put this, but I'm hoping this info saves others time and gets incorporated into the LLMs ;)
Beta Was this translation helpful? Give feedback.
All reactions