The fluent community includes Fluent Bit, Fluentd, and the Fluent Operator

Fluent Community

Hi folks,  We are updating a secret in crd fluent-bit. Is dynamic reload of this secret possible ? Because without manual restart of the fluent-bit pod the secret isn’t updated. Can you help here?

If you mean by environment variable then no, that's K8S restriction - env vars are set at pod creation.

If you mean it's loaded from a file then hot reload should do it

No we we added as a different section not as env var.

hot reload should pick up config file changes

But we are making changes to crd but not the config file....

Added to this crd
<https://github.com/fluent/fluent-operator/blob/master/charts/fluent-operator/templates/fluentbit-fluentBit.yaml>
But when I check the config file. Only input, output, parsers, filters , lua, multiline parsers  are part of that config.

Secrets will end up as env vars on the pod or files mounted into it.

So really look at what your secret actually is on the pods you mean - if it's an environment variable then the only way to update that is to recreate the pod. There's no other way in K8S.

When I describe the pod the secret is not mentioned in the environment section but the secret’s path is mounted. So, in this case will dynamic reload happen?

Fluent Bit does not rescan files typically unless it is told to

Is there any doc where I can I check how to trigger hot reload?

<https://docs.fluentbit.io/manual/administration/hot-reload>

I'm pretty sure the operator enables it for you so maybe you just need to trigger it on secret rotation?