Allow halting on certificate errors

When certificate errors are encountered, the fix is usually to restart the affected pod. To allow this to happen automatically, add a configuration setting for the Lighthouse agent. The setting is disabled by default; it will be enabled by default by the operator. Signed-off-by: Stephen Kitt <[email protected]>
submariner-io · Oct 23, 2023 · 237983d · 237983d
1 parent d4193c3
commit 237983d
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/pkg/agent/controller/types.go b/pkg/agent/controller/types.go
@@ -58,10 +58,11 @@ type Controller struct {
 }
 
 type AgentSpecification struct {
-	ClusterID        string
-	Namespace        string
-	GlobalnetEnabled bool `split_words:"true"`
-	Uninstall        bool
+	ClusterID              string
+	Namespace              string
+	GlobalnetEnabled       bool `split_words:"true"`
+	Uninstall              bool
+	HaltOnCertificateError bool
 }
 
 type ServiceImportAggregator struct {

diff --git a/pkg/agent/main.go b/pkg/agent/main.go
@@ -110,6 +110,8 @@ func main() {
 	exitOnError(err, "Error processing env config for agent spec")
 	logger.Infof("AgentSpec: %#v", agentSpec)
 
+	util.AddCertificateErrorHandler(agentSpec.HaltOnCertificateError)
+
 	err = mcsv1a1.AddToScheme(scheme.Scheme)
 	exitOnError(err, "Error adding Multicluster v1alpha1 to the scheme")