I can't find the CLI reference for

fleet

or

fleetctl

in the docs; also the page section linked here no longer exists: https://fleetdm.com/docs/configuration/fleet-server-configuration#server-cert so I'll just ask here: is there a command to have Fleet reload just the TLS cert when it renews, or do we have to stop/start the whole Fleet server app?

@Kathy Satterlee or @Ian Littman (oncall duties) - Can we take a look at these broken links and help Shawn out with his question?

Taking a look at the links.

I'm looking at the inline help for both binaries and not seeing any options for reloading the config/certs

If Fleet itself is terminating TLS, then you'll need to restart the server to read the updated certificate.

What do you mean by terminating? The cert is loaded directly via the server.yml, there's no reverse proxy

Then yes, you'll need to restart the Fleet server.

Okay

Here's the intended destination for that link. Getting that corrected now: https://fleetdm.com/docs/deploy/reference-architectures#tls-certificate

Thank you 🙂

Any time!

Dang, those traces are 🔥 https://github.com/fleetdm/fleet/issues/655