Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

internal/dag: trigger rebuild for configured secrets #3191

Merged
merged 1 commit into from Dec 11, 2020

Conversation

tsaarni
Copy link
Member

@tsaarni tsaarni commented Dec 9, 2020

This change adds secret references from the configuration file to the list of
secrets that will trigger DAG rebuild. Previously only secrets referred by
HTTPProxy and Ingress resources were considered. The result was that secrets
referred by fallback-certificate and envoy-client-certificate config file entries
were not picked up correctly if they were created after HTTPProxy or Ingress.

Fixes #3190

Signed-off-by: Tero Saarni tero.saarni@est.tech

@codecov
Copy link

codecov bot commented Dec 9, 2020

Codecov Report

Merging #3191 (019af9d) into main (9a454f5) will decrease coverage by 0.09%.
The diff coverage is 18.18%.

Impacted file tree graph

@@            Coverage Diff             @@
##             main    #3191      +/-   ##
==========================================
- Coverage   74.14%   74.04%   -0.10%     
==========================================
  Files          97       97              
  Lines        6011     6019       +8     
==========================================
  Hits         4457     4457              
- Misses       1461     1468       +7     
- Partials       93       94       +1     
Impacted Files Coverage Δ
cmd/contour/serve.go 0.00% <0.00%> (ø)
internal/dag/cache.go 95.25% <100.00%> (-0.76%) ⬇️

@tsaarni tsaarni force-pushed the issues/3190 branch 2 times, most recently from 8291bc3 to 5c421fb Compare December 10, 2020 11:14
@skriss skriss added this to In progress in Contour Project Board via automation Dec 10, 2020
Copy link
Member

@skriss skriss left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks @tsaarni!

Copy link
Member

@stevesloka stevesloka left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@stevesloka
Copy link
Member

@tsaarni can you rebase? It looks like I can click the update branch button workflow.

This change adds secret references from the configuration file to the list of
secrets that will trigger DAG rebuild.  Previously only secrets referred by
HTTPProxy and Ingress resources were considered.  The result was that secrets
were not picked up correctly if they were created after the creation of
HTTPProxy or Ingress themselves triggered a rebuild.

Signed-off-by: Tero Saarni <tero.saarni@est.tech>
@tsaarni
Copy link
Member Author

tsaarni commented Dec 11, 2020

@stevesloka sure! The PR is now rebased.

@skriss skriss merged commit 3548fec into projectcontour:main Dec 11, 2020
Contour Project Board automation moved this from In progress to 1.11 Release Dec 11, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Client certificate missing will halt all traffic indefinitely
3 participants