test(e2e): TLS certificate hot-reload live-listener regression net (#4861)

Prove the swap-certificates-without-restart promise over real TLS
handshakes (backlog#1154 peri-5): new connections pick up the rotated
certificate within the reload interval, a session opened under the old
certificate survives the swap, and garbage material is fail-safe (the
old certificate keeps serving, the failure leaves a tls_reload_failed
log event, the process stays up). Wired into the e2e-smoke nextest
profile (ci-4 mechanism).
This commit is contained in:
Zhengchao An
2026-07-15 16:05:06 +08:00
committed by GitHub
parent 242424b0fc
commit 602a742a1b
3 changed files with 313 additions and 1 deletions
+6
View File
@@ -197,6 +197,12 @@ mod object_lambda_test;
#[cfg(test)]
mod notification_webhook_test;
// TLS certificate hot-reload live-listener e2e (backlog#1154 peri-5): swap
// certificates without a restart, existing sessions survive, bad material is
// fail-safe (old certificate keeps serving, failure is logged).
#[cfg(test)]
mod tls_hot_reload_test;
// Replication extension end-to-end regression tests
#[cfg(test)]
mod replication_extension_test;