Make "caCertSecretName" optional in external authService config
See original GitHub issueWhen using an address space configuration with an external authentication service with a host for which there is a proper (not self-signed) certificate, it would be good to have the “caCertSecretName” configuration be optional. Meaning that in this case JRE / OS provided CA certs should be used for validation.
Currently, when omitting the “caCertSecretName” property, there is an exception about this property being required. With an empty property value, there is an internal exception later on:
2018-09-04 07:34:31 INFO ControllerChain:109 - Check address spaces: [play:bosch, play:pg-hub-4463]
2018-09-04 07:34:31 WARN ResourceChecker:53 - Exception in checker task
java.lang.IllegalArgumentException: Name must be provided.
at io.fabric8.kubernetes.client.dsl.base.BaseOperation.withName(BaseOperation.java:255)
at io.fabric8.kubernetes.client.dsl.base.BaseOperation.withName(BaseOperation.java:70)
at io.enmasse.controller.common.KubernetesHelper.getSecret(KubernetesHelper.java:220)
at io.enmasse.controller.TemplateInfraResourceFactory.lambda$createResourceList$1(TemplateInfraResourceFactory.java:51)
at java.util.Optional.ifPresent(Optional.java:159)
at io.enmasse.controller.TemplateInfraResourceFactory.createResourceList(TemplateInfraResourceFactory.java:51)
at io.enmasse.controller.StatusController.isReady(StatusController.java:38)
at io.enmasse.controller.StatusController.handle(StatusController.java:26)
at io.enmasse.controller.ControllerChain.onUpdate(ControllerChain.java:120)
at io.enmasse.k8s.api.ResourceChecker.doWork(ResourceChecker.java:48)
at io.enmasse.k8s.api.ResourceChecker.run(ResourceChecker.java:40)
at java.lang.Thread.run(Thread.java:748)
Issue Analytics
- State:
- Created 5 years ago
- Reactions:1
- Comments:5 (5 by maintainers)
Top Results From Across the Web
Adding CORS configuration while using EXT Auth service ...
I'm running 2 Kubernetes clusters with ambassador edge stack. One cluster does not use any Auth Service so setting CORS configuration by ...
Read more >AuthService settings | Ambassador
This will tell Emissary-ingress to allow all requests for that Mapping through without interacting with the external auth service. This could be helpful,...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
@lulf test was successful, it works 👍
@calohmn yes