Live reload certificates

[rahij]

What happened?

Witchcraft does not seem to live reload certificates when they are updated on disk. In k8s, we generate certificates via cert-manager, which automatically regenerates certificates when they expire. However this does not seem to be reloaded in witchcraft until the pod is restarted. Is this expected?

What did you want to happen?

Live reload certificates when they change on disk.

[sfackler]

That's definitely expected behavior today. I don't think I'd be totally opposed to supporting live reloads, though I don't think other Witchcraft implementations do either.

If we did this we'd probably also need to update conjure-rust-runtime similarly.

[rahij]

Thanks if you're okay with adding support, I can try to take a look at it if you think it's friendly for a first time contribution to the code.