Uploaded image for project: 'Cloud Enablement'
  1. Cloud Enablement
  2. CLOUD-2689

Add /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt to default system/java truststore by default at startup

    XMLWordPrintable

Details

    • Feature Request
    • Resolution: Won't Do
    • Major
    • None
    • None
    • Common
    • None
    • CLOUD Maintenance Sprint 28

    Description

      Using HTTPS for services inside openshift cluster should work out of the box, so /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt should be added to the system and java truststores at startup in all images, with an optional env option to disable this feature.

      Attachments

        Issue Links

          duplicates

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) CLOUD-2289 Automatically import service-ca.crt in jre/lib/security/cacerts

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is related to

          Bug - A problem that impairs or prevents the functions of the product. OPENJDK-77 openjdk-8 s2i Image does not use default TLS CA bundle

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              jdowland@redhat.com Jonathan Dowland
              maschmid@redhat.com Marek Schmidt
              Stanislav Kaleta Stanislav Kaleta (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: