Skip to content

crypto/spiffe/trustanchors/file: handle transient failed reload attempts - #171

Merged
cicoyle merged 2 commits into
dapr:mainfrom
JoshVanL:ci-fix/trustanchors-torn-read
Oct 13, 2026
Merged

cicoyle merged 2 commits into
dapr:mainfrom
JoshVanL:ci-fix/trustanchors-torn-read

Conversation

@JoshVanL

Copy link
Copy Markdown
Contributor

No description provided.

@JoshVanL
JoshVanL requested a balanced review from Copilot October 12, 2026 16:51
@JoshVanL
JoshVanL requested review from a team as code owners October 12, 2026 16:51

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Core retry and CA/JWT atomicity behaviors lack direct test coverage.

2 open findings
What changed in this PR

Improves trust-anchor reload resilience while preserving the last valid state.

Changes:

  • Retries transient reload failures.
  • Applies CA and JWT updates atomically.
  • Tests recovery after malformed CA content.
File Description
file.go Adds retry and atomic update logic.
file_test.go Verifies failed reload retention and recovery.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread crypto/spiffe/trustanchors/file/file.go
Comment thread crypto/spiffe/trustanchors/file/file.go
Signed-off-by: joshvanl <me@joshvanl.dev>
@cicoyle
cicoyle merged commit 579f006 into dapr:main Oct 13, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants