pomerium / pomerium / 37510731467

54%

Build Type

push

github

Committed by web-flow

Commit Message

fix(zero): dynamically load k8s config (#6845)

## Summary
The zero kubernetes secret bootstrap writer currently only loads the
kubernetes token once on start. This token will periodically be
refreshed and we won't pick up the new value. This PR updates the code
to load the token every time we attempt to write the bootstrap config,
which should give us a fresh token.

## Related issues
-
[ENG-4435](https://linear.app/pomerium/issue/ENG-4435/zero-kubernetes-secret-bootstrap-writer-never-refreshes-its-service)


## AI disclosure
none

## Checklist

- [x] reference any related issues
- [ ] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] disclosed AI usage (or wrote "none") per AI_POLICY.md
- [x] ready for review

Coverage Stats

26 of 31 new or added lines in 1 file covered. (83.87%)

29 existing lines in 8 files now uncovered.

34814 of 65010 relevant lines covered (53.55%)

314.71 hits per line