Certificate Hot Reload is not happening for the ZIPKIN interface

[Sidhartha-Biswal]

Hi @yurishkuro,

Do we need to configure any CLI flag for the hot reload of server certificate in case of the zipkin interface in Jaeger v1.62.0?

Was there certificate reload support for zipkin before v1.62.0?

The reload is working after adding --collector.zipkin.tls.reload-interval cli flag.

Could you please mention about this flag in https://www.jaegertracing.io/docs/1.62/cli/?

Thanks,
Sidhartha

[dosubot[bot]]

I couldn't find specific information about TLS certificate hot reload for the Zipkin interface in Jaeger v1.62.0. However, there is a similar unsolved discussion regarding missing CLI flags for TLS reload in the Jaeger documentation, which might be related to your issue. You can view the discussion here ^[1].

For other interfaces, the general CLI flag for TLS certificate hot reload is --<prefix>.tls.reload-interval, which specifies the duration after which the certificate will be reloaded. This flag is available if EnableCertReloadInterval is set to true in the ServerFlagsConfig ^[2][3].

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Other}

[yurishkuro]

Since v1.65 all TLS configs have been migrated to OTEL config and they all support --<prefix>.tls.reload-interval flag.

[Sidhartha-Biswal]

Hi @yurishkuro, we tried with --collector.zipkin.tls.reload-interval cli flag and the certificate reload worked. We checked the CLI flags in https://www.jaegertracing.io/docs/1.65/cli/. But only --collector.otlp.http.tls.reload-interval and --collector.otlp.grpc.tls.reload-interval flags are mentioned there. The other CLI flags like --collector.http.tls.reload-interval, --collector.zipkin.tls.reload-interval and --query.http.tls.reload-interval are not mentioned. Could you please check?