kes: automatically reload KES client certificate (#15450)

This commit adds support for automatically reloading
the MinIO client certificate for authentication to KES.

The client certificate will now be reloaded:
 - when the private key / certificate file changes
 - when a SIGHUP signal is received
 - every 15 minutes

Fixes #14869

Signed-off-by: Andreas Auernhammer <hi@aead.dev>
This commit is contained in:
Andreas Auernhammer
2022-08-03 01:58:09 +02:00
committed by GitHub
parent b3edb25377
commit d774a3309b
4 changed files with 92 additions and 35 deletions

2
go.mod
View File

@@ -50,7 +50,7 @@ require (
github.com/minio/kes v0.20.0
github.com/minio/madmin-go v1.4.9
github.com/minio/minio-go/v7 v7.0.33
github.com/minio/pkg v1.1.26
github.com/minio/pkg v1.3.0
github.com/minio/selfupdate v0.5.0
github.com/minio/sha256-simd v1.0.0
github.com/minio/simdjson-go v0.4.2