flintlockclient.New reads each host's cert_file, key_file, and ca_file once, into a static tls.Config. When the certificate is renewed (for example by cert-manager), battery keeps presenting the old one until it restarts.
Read the files at handshake time instead, so a renewed certificate is picked up on the next connection with no restart and no signal.
Related: #69 covers the same problem for poolmgrd's own API server certificate.
flintlockclient.Newreads each host'scert_file,key_file, andca_fileonce, into a statictls.Config. When the certificate is renewed (for example by cert-manager), battery keeps presenting the old one until it restarts.Read the files at handshake time instead, so a renewed certificate is picked up on the next connection with no restart and no signal.
Related: #69 covers the same problem for poolmgrd's own API server certificate.