question: Dynamic TLS materials for MetricsService cluster

[freddygv]

I would like to configure a MetricsService stats sink to export metrics from Envoy, but the TLS certificates will not be available at bootstrap time.

After reading docs/issues and running small tests it seems that:

1. Stats sinks such as MetricsService must be defined statically at bootstrap.
2. The cluster for a metrics service stats sink must also be defined statically at bootstrap.
3. An open bug #19618 prevents configuring a static cluster with SDS via ADS.
4. Clusters provided via ADS/CDS with the same name as a static cluster do not overwrite the static cluster.

Given these four points, are there any other options available for providing TLS materials for communication with a stats sink dynamically?

Also if any of those four points are inaccurate, let me know.

Thank you

[mattklein123]

As a hack you could loop back to the local Envoy which can do the dynamic loading?

[freddygv]

Got that working and it's better than the alternatives, thanks!