You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kie.apache.org by "yesamer (via GitHub)" <gi...@apache.org> on 2026/09/10 07:34:35 UTC
[PR] fix(onboarding-quarkus): disable HTTPS on KubernetesMockServer to fix flaky IT on JDK 17 [incubator-kie-examples]
yesamer opened a new pull request, #2248:
URL: https://github.com/apache/incubator-kie-examples/pull/2248
## Problem
`OnboardingEndpointIT` fails intermittently in CI with:
```
io.vertx.core.VertxException: java.security.cert.CertificateException:
No provider succeeded to generate a self-signed certificate.
Caused by: java.lang.UnsupportedOperationException:
OpenJdkSelfSignedCertGenerator not supported on the used JDK version
```
The `@EnableKubernetesMockClient` annotation starts a `KubernetesMockServer`
in HTTPS mode by default. To serve TLS, Netty's `SelfSignedCertificate` tries
three certificate generators in sequence:
| Provider | Result on JDK 17 |
|---|---|
| `OpenJdkSelfSignedCertGenerator` | Always fails — `sun.security.x509.*` blocked by JPMS strong encapsulation |
| `BouncyCastleSelfSignedCertGenerator` | Always fails — BouncyCastle not on the classpath |
| `KeytoolSelfSignedCertGenerator` | Intermittently fails — shells out to `keytool`, sensitive to runner environment |
Because the first two providers are categorically broken on JDK 17, the entire
reliability burden falls on the `keytool` fallback, which is sensitive to PATH
propagation and ephemeral runner image changes — causing the non-systematic failure.
## Fix
Add `https = false` to the `@EnableKubernetesMockClient` annotation.
The mock server is only present so the `kie-addons-quarkus-kubernetes` extension
has a Kubernetes API endpoint to connect to at application startup. The test itself
exercises process execution over REST and has no dependency on the transport
protocol used by the mock server. HTTP is fully sufficient.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@kie.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@kie.apache.org
For additional commands, e-mail: commits-help@kie.apache.org
Re: [PR] fix(onboarding-quarkus): disable HTTPS on KubernetesMockServer to fix flaky IT on JDK 17 [incubator-kie-examples]
Posted by "yesamer (via GitHub)" <gi...@apache.org>.
yesamer merged PR #2248:
URL: https://github.com/apache/incubator-kie-examples/pull/2248
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@kie.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@kie.apache.org
For additional commands, e-mail: commits-help@kie.apache.org
Re: [PR] fix(onboarding-quarkus): disable HTTPS on KubernetesMockServer to fix flaky IT on JDK 17 [incubator-kie-examples]
Posted by "yesamer (via GitHub)" <gi...@apache.org>.
yesamer commented on PR #2248:
URL: https://github.com/apache/incubator-kie-examples/pull/2248#issuecomment-5614943088
@pefernan @martinweiler Is ok disabling HTTPS for that test?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@kie.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@kie.apache.org
For additional commands, e-mail: commits-help@kie.apache.org