From 9826ea3fdbfd434c490ce364873810597b89d553 Mon Sep 17 00:00:00 2001
From: "data-plane-api(CircleCI)" <data-plane-api@users.noreply.github.com>
Date: Thu, 2 Apr 2020 22:33:07 +0000
Subject: [PATCH] doc: certificate hot-reload for xDS gRPC connection (#10628)

Adds documentation for #10163.

Signed-off-by: Tero Saarni <tero.saarni@est.tech>

Mirrored from https://github.com/envoyproxy/envoy @ f5d2cc673786cb40af8e06658b652de037f455a6
---
 envoy/api/v2/core/config_source.proto    | 2 ++
 envoy/config/core/v3/config_source.proto | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/envoy/api/v2/core/config_source.proto b/envoy/api/v2/core/config_source.proto
index f32a39e6..2b1a6a7c 100644
--- a/envoy/api/v2/core/config_source.proto
+++ b/envoy/api/v2/core/config_source.proto
@@ -135,6 +135,8 @@ message ConfigSource {
     option (validate.required) = true;
 
     // Path on the filesystem to source and watch for configuration updates.
+    // When sourcing configuration for :ref:`secret <envoy_api_msg_auth.Secret>`,
+    // the certificate and key files are also watched for updates.
     //
     // .. note::
     //
diff --git a/envoy/config/core/v3/config_source.proto b/envoy/config/core/v3/config_source.proto
index 2ec7b5b2..e45812c2 100644
--- a/envoy/config/core/v3/config_source.proto
+++ b/envoy/config/core/v3/config_source.proto
@@ -144,6 +144,8 @@ message ConfigSource {
     option (validate.required) = true;
 
     // Path on the filesystem to source and watch for configuration updates.
+    // When sourcing configuration for :ref:`secret <envoy_api_msg_extensions.transport_sockets.tls.v3.Secret>`,
+    // the certificate and key files are also watched for updates.
     //
     // .. note::
     //