Skip to content

Document pre-req for manageTLS: runtime must load certificates #538

Open
Open
Document pre-req for manageTLS: runtime must load certificates#538
Assignees
idlewis
Labels
documentationImprovements or additions to documentationzenhub-dev

Description

@leochr
leochr
opened on May 11, 2023

manageTLS mounts the certificates onto the runtime pods, but the runtime is responsible for loading the mounted certificates. Liberty containers load the certificates automatically into the default keystore / truststore at container startup. tWAS runtime doesn't have such equivalence. Document that the inorder for manageTLS to work end-to-end, runtime must load the certs.

Document this in the limitation / troubleshooting section

Activity

  1. leochr
    added
    documentationImprovements or additions to documentation
    zenhub-dev
    on May 11, 2023

  2. tam512 commented on May 11, 2023

    @tam512
    tam512
    on May 11, 2023

    The current workaround to install tWAS applications using RCO v1.2.0 is to use spec.route.termination: edge with insecureEdgeTerminationPolicy: Redirect or insecureEdgeTerminationPolicy: Allow or spec.route.termination: passthrough

    For example:

    spec:
  manageTLS: false
  route:
    termination: edge
    insecureEdgeTerminationPolicy: Redirect
  service:
    type: ClusterIP
    port: 9080
  3. idlewis
    self-assigned this
    on Jul 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

documentationImprovements or additions to documentationzenhub-dev

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions