You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
To connect to KV store it is recommended to use authentication such as TLS client certificates. These certificates have a limited validity duration. So they are renewed before expiration. Currently modelmesh does not detect and reload the client certificates from disc if they have been updated/renewed. Only a restart of modelmesh loads the new certificates. This results in connection issues to the KV store and eventually failures, because state cannot be synced anymore.
When using modelmesh with kubernetes and using cert-manager to issue the client certificates, the certs are provided as secrets which are mounted into the container and cert-manager automatically updates them before expiration. However modelmesh does not use the new certificat.
Related to #135, can also function as workaround because it restart the pod on kv connection failures
The text was updated successfully, but these errors were encountered:
To connect to KV store it is recommended to use authentication such as TLS client certificates. These certificates have a limited validity duration. So they are renewed before expiration. Currently modelmesh does not detect and reload the client certificates from disc if they have been updated/renewed. Only a restart of modelmesh loads the new certificates. This results in connection issues to the KV store and eventually failures, because state cannot be synced anymore.
When using modelmesh with kubernetes and using cert-manager to issue the client certificates, the certs are provided as secrets which are mounted into the container and cert-manager automatically updates them before expiration. However modelmesh does not use the new certificat.
Related to #135, can also function as workaround because it restart the pod on kv connection failures
The text was updated successfully, but these errors were encountered: