From a266146a0a85d232cc0e36a9f3e166e0301fb986 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Serta=C3=A7=20=C3=96zercan?= <852750+sozercan@users.noreply.github.com> Date: Thu, 9 Apr 2026 12:38:25 -0700 Subject: [PATCH] rotator: stop exiting process on secret refresh Signed-off-by: Sertac Ozercan --- pkg/rotator/rotator.go | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/pkg/rotator/rotator.go b/pkg/rotator/rotator.go index 74889bf..a316a2d 100644 --- a/pkg/rotator/rotator.go +++ b/pkg/rotator/rotator.go @@ -339,8 +339,7 @@ func (cr *CertRotator) refreshCertIfNeeded() (bool, error) { rotatedCA = true crLog.Info("server certs refreshed") if cr.RestartOnSecretRefresh { - crLog.Info("Secrets have been updated; exiting so pod can be restarted (This behaviour can be changed with the option RestartOnSecretRefresh)") - os.Exit(0) + crLog.Info("Secrets have been updated; RestartOnSecretRefresh is deprecated and ignored to avoid restart loops") } return true, nil } @@ -353,8 +352,7 @@ func (cr *CertRotator) refreshCertIfNeeded() (bool, error) { } crLog.Info("server certs refreshed") if cr.RestartOnSecretRefresh { - crLog.Info("Secrets have been updated; exiting so pod can be restarted (This behaviour can be changed with the option RestartOnSecretRefresh)") - os.Exit(0) + crLog.Info("Secrets have been updated; RestartOnSecretRefresh is deprecated and ignored to avoid restart loops") } return true, nil }