Bug Report

1. Minimal reproduce step (Required)

Configure TiProxy with TLS certificates managed by cert-manager in Kubernetes with TiDB Operator. Set the certificate lifetime to hours.

2. What did you expect to see? (Required)

TiProxy automatically picking up new certificates when cert-manager rotates them

3. What did you see instead (Required)

No rotation for the TiProxy API port.

4. What is your version? (Required)

v1.3.2