apache / apache/pekko-management

Investigate issues with SSL Auth that affect discovery-kubernetes-api when we use K8s v1.30+

Open
#459 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Scala
Stars
33
Forks
19
Avg merge
4h 48m
Merged PRs (30d)
29

Description

K8s v1.30 seems to have something that stops our SSL Auth from working - causing SSL Handshake issues.
Seen in #455

If we run the tests with newer JDKs than the Java 8 ones used in our K8s Integration tests, the SSL Handshake issues go away. So it seems like Java 8 may not necessarily support the cipher suites that we need. The integration tests don't pass but they fail with other SSL issues associated with incomplete SSL setup (no client keystore, for one).

Contributor guide

Open the contributing guide

Research direction

Start with the SSL Auth failure described in #455 and run the Kubernetes integration tests against K8s v1.30+ with Java 8 and a newer JDK. Compare the SSL handshake behavior and inspect the incomplete SSL setup, including the missing client keystore. Done means the Java 8 cipher-suite compatibility and remaining SSL setup issue are identified and the integration-test outcome is explained.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, kubernetes, scala
Domain
devops, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.