Our current puppetization touches remap.config and reloads the TS service to reload modified lua scripts, this wasn't enough to apply the changes introduced by https://gerrit.wikimedia.org/r/#/q/I6c7c473cfcd3ce3fc3b7c0552018badf5fb1c9aa making necessary a service restart to make the changes effective.
The ability to reload global lua scripts has been added in 9.x: https://github.com/apache/trafficserver/commit/e6147753cd65c3edd32b365e09b4d65edcffdd01
This explains why reloading a global tls.lua script does not work. We might want to consider backporting that patch.
Reloading per-remap lua scripts works just fine on 8.x, provided that remap.config has changed (ie: touch remap.config ; traffic_ctl config reload). We need to update our puppetization accordingly.
Mentioned in SAL (#wikimedia-operations) [2019-10-23T10:46:04Z] <ema> cp-ats: rolling ATS backend restart to apply https://gerrit.wikimedia.org/r/#/c/operations/puppet/+/545522/ T233274