Skip to content

fix: the control plane owns a sidecar's listeners after the handshake #177

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
rogefm wants to merge 2 commits into
base: main
Choose a base branch
from
Open

fix: the control plane owns a sidecar's listeners after the handshake #177

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
200b86a
fix: the control plane owns a sidecar's listeners after the handshake
rogefm Sep 11, 2026
d8d7d1c
fix: keep the ping sentence, add listeners to the list it names
rogefm Sep 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion control-plane/connect-sidecar.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,7 @@ Four properties fall out of this shape, and they are the reason it looks like th
hoop start sidecar --config config.yaml --token "<the token you copied>"
```

Listeners still come from the local file. Everything the Control Plane manages — guardrails, masking, analyzer settings — arrives over the ping.
The first handshake uploads this whole file. Everything the Control Plane manages — listeners, guardrails, masking, analyzer settings — arrives over the ping.
</Step>
<Step title="Confirm what it resolved">
The admin API reports the merged, live configuration. This is the only place you can see what the Sidecar actually ended up running:
Expand All @@ -83,6 +83,7 @@ Four properties fall out of this shape, and they are the reason it looks like th
| It appears, but runs no managed guardrails | Read `/config` on the admin API. A Sidecar that could not fetch falls back to its local file. |
| Authentication fails | The token is per-Sidecar. Reusing one across two Sidecars is not a supported shape. |
| Rules changed centrally but the Sidecar did not | Configuration is picked up on the ping, not pushed. Wait for the next interval or restart the Sidecar. |
| My listeners never reached the Control Plane | It already had a configuration for this Sidecar, so it kept that one. Edit the listeners there. |

---

Expand Down