You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by "squakez (via GitHub)" <gi...@apache.org> on 2025/12/17 07:43:47 UTC
[I] Change caCert params from secrets to files [camel-k]
squakez opened a new issue, #6425:
URL: https://github.com/apache/camel-k/issues/6425
### Requirement
We recently have introduced caCerts in jvm trait, see:
https://github.com/apache/camel-k/blob/061a5b33057c30ecdeb4a34b533f8ac6e805d669/pkg/apis/camel/v1/trait/jvm.go#L47-L54
However, it would be more appropiate not to leverage directly with secrets (ie, reading them), but, expecting that those secrets are introduced by user (via mount trait) and are available as file instead. So, we simplify the implementation by reading files instead.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Change caCert params from secrets to files [camel-k]
Posted by "pkalsi97 (via GitHub)" <gi...@apache.org>.
pkalsi97 commented on issue #6425:
URL: https://github.com/apache/camel-k/issues/6425#issuecomment-3664554876
@squakez The approach makes sense to me as well. I'll use mount container to load both CACert and Password. I'll try to implement this and see how it goes. Will try to do this by tomorrow.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Change caCert params from secrets to files [camel-k]
Posted by "squakez (via GitHub)" <gi...@apache.org>.
squakez commented on issue #6425:
URL: https://github.com/apache/camel-k/issues/6425#issuecomment-3664081595
@pkalsi97 I was thinking about the recent feature and I think we need to amend a little bit the implementation. If you can have a look just let me know. With the approach proposed in this issue we would simplify a lot the implementation and avoid reading secrets directly (which we may disallow in the future).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Change caCert params from secrets to files [camel-k]
Posted by "squakez (via GitHub)" <gi...@apache.org>.
squakez commented on issue #6425:
URL: https://github.com/apache/camel-k/issues/6425#issuecomment-3664088345
For `CACertPassword` we may think to get either the file or an env var name where the user has to mount the expected password if the first approach complicates the implementation.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Change caCert params from secrets to files [camel-k]
Posted by "squakez (via GitHub)" <gi...@apache.org>.
squakez closed issue #6425: Change caCert params from secrets to files
URL: https://github.com/apache/camel-k/issues/6425
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Change caCert params from secrets to files [camel-k]
Posted by "pkalsi97 (via GitHub)" <gi...@apache.org>.
pkalsi97 commented on issue #6425:
URL: https://github.com/apache/camel-k/issues/6425#issuecomment-3664103547
@squakez I'll look into this shortly, and will read all the observations and suggestions.
Will get back to you.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Change caCert params from secrets to files [camel-k]
Posted by "squakez (via GitHub)" <gi...@apache.org>.
squakez commented on issue #6425:
URL: https://github.com/apache/camel-k/issues/6425#issuecomment-3664692370
> mount trait to load both CACert and Password
We need to expect that the user is the one mounting the files somehow in the application. Most certainly they will be secrets from mount trait (which the user has to configure), but the JVM trait should be agnostic and expecting the existence of those files in the filesystem.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org