Support file-based plugin configuration in catalog with hot reload about spire HOT 4 CLOSED

Outstanding question is how do we want to trigger reloading. Signal? Timer?

from spire.

I have a prototype implementation I'll dust off for this. Just need to write up some tests.

from spire.

For clarification, the "k8s_psat.conf" file in the example above would be HCL (version 1) correct?

If we are establishing plugin loading policy, I propose that such files match whatever the server loads (HCL 1.0 at the moment).

from spire.

By convention, that's correct. And certainly what will be expected for all built-in plugins for the foreseeable future. Technically, SPIRE Core would no longer care as long as the configuration was utf-8 text based, since this data isn't parsed alongside the main HCL config. The data would be loaded from file, turned into a string, and then otherwise passed unmodified/unparsed into the plugin. So external plugin authors could do what they wanted 🤷

from spire.