Do pwpush reload config file when written to

[MindTooth]

Hi,

I am looking into pwpush, k8s, Helm, external secrets. And more specifically about rotating secrets. During a Argo CD talk at KubeCon it now recommends using external secrets. What that means is that it's a separate controller that injects data into a secret, and not e.g. Argo CD. This makes it possible to refresh a token/password from the source (e.g. 1Password, Hashicorp Vault). For this to then work, one must mount the secret as a volume and then read the config from that.

My question is, does pwpush reload when the settings.yml file is updated?

(The Helm chart needs an update to support a volume as a secret source. Will look into this later.)

[pglombardo]

Hi @MindTooth,

No - currently you would have to manually call bin/pwpush restart which will reload the process.

If it's critical, we might be able to add a file monitor that on change just calls bin/pwpush restart automatically...

[MindTooth]

Nothing critical. Pwpush came first to mind watching the talk. 😊

If a restart/reload would be trivial without too much interruptions, I think it's a great addition. That way we make it more robust and maybe "more secure" by being able to rotate the secret one place and automagically have pwpush use the new config/secret.