hcp/kas: disable encryption config auto reload

Signed-off-by: Damien Grisonnet <dgrisonn@redhat.com>
bryan-cox · Aug 8, 2024 · 50fbc23 · 50fbc23
1 parent 2880292
commit 50fbc23
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/control-plane-operator/controllers/hostedcontrolplane/kas/kms/aws.go b/control-plane-operator/controllers/hostedcontrolplane/kas/kms/aws.go
@@ -166,6 +166,9 @@ func (p *awsKMSProvider) ApplyKMSConfig(podSpec *corev1.PodSpec) error {
 	}
 	container.VolumeMounts = append(container.VolumeMounts,
 		awsKMSVolumeMounts.ContainerMounts(KasMainContainerName)...)
+
+	container.Args = append(container.Args, "--encryption-provider-config-automatic-reload=false")
+
 	return nil
 }