apache / apache/pekko-management
Investigate issues with SSL Auth that affect discovery-kubernetes-api when we use K8s v1.30+
- Dominant language
- Scala
- Stars
- 33
- Forks
- 19
- Avg merge
- 4h 48m
- Merged PRs (30d)
- 29
Description
K8s v1.30 seems to have something that stops our SSL Auth from working - causing SSL Handshake issues.
Seen in #455
If we run the tests with newer JDKs than the Java 8 ones used in our K8s Integration tests, the SSL Handshake issues go away. So it seems like Java 8 may not necessarily support the cipher suites that we need. The integration tests don't pass but they fail with other SSL issues associated with incomplete SSL setup (no client keystore, for one).
Contributor guide
Research direction
Start with the SSL Auth failure described in #455 and run the Kubernetes integration tests against K8s v1.30+ with Java 8 and a newer JDK. Compare the SSL handshake behavior and inspect the incomplete SSL setup, including the missing client keystore. Done means the Java 8 cipher-suite compatibility and remaining SSL setup issue are identified and the integration-test outcome is explained.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, kubernetes, scala
- Domain
- devops, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100