Skip to content

Commit

Permalink
Catch updates to CA and Router TLS secrets
Browse files Browse the repository at this point in the history
Change-Id: I9d786d9762d6bd3b07c01c82ecc5c609961084b9
  • Loading branch information
ahorcom committed Apr 7, 2022
1 parent eaffd95 commit 99b5673
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions mysqloperator/controller/innodbcluster/operator_cluster.py
Original file line number Diff line number Diff line change
Expand Up @@ -606,6 +606,7 @@ def on_pod_delete(body: Body, logger: Logger, **kwargs):


@kopf.on.create("", "v1", "secrets") # type: ignore
@kopf.on.update("", "v1", "secrets") # type: ignore
def on_secret_create(name: str, namespace: str, logger: Logger, **kwargs):
"""
Wait for Secret objects used by clusters for TLS CA and certificate.
Expand All @@ -628,10 +629,10 @@ def on_secret_create(name: str, namespace: str, logger: Logger, **kwargs):
# check for any clusters that reference this secret
for cluster in clusters:
if cluster.parsed_spec.tlsCASecretName == name:
logger.info("operator: Updating TLS CA")
logger.info("operator: TLS CA was changed")
ic = ClusterController(cluster)
ic.on_router_tls_changed()
elif cluster.parsed_spec.router.tlsSecretName == name:
logger.info("operator: Updating TLS KEY/CERT")
logger.info("operator: TLS KEY/CERT was changed")
ic = ClusterController(cluster)
ic.on_router_tls_changed()

0 comments on commit 99b5673

Please sign in to comment.