[
https://issues.apache.org/jira/browse/CAMEL-26827?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Claus Ibsen resolved CAMEL-26827.
---------------------------------
Resolution: Fixed
Fixed via https://github.com/apache/camel/pull/29630 (merged to main as
188ed5bdad79).
_Claude Code on behalf of davsclaus_
> camel-opa/openfga - release TLS health probe clients on lifecycle stop
> ----------------------------------------------------------------------
>
> Key: CAMEL-26827
> URL: https://issues.apache.org/jira/browse/CAMEL-26827
> Project: Camel
> Issue Type: Bug
> Reporter: Andrea Cosentino
> Assignee: Andrea Cosentino
> Priority: Major
> Labels: authorization, camel-opa, camel-openfga, component-audit
> Fix For: 4.24.0
>
>
> h2. Problem / motivation
> OpaHealthProbe and OpenFgaHealthProbe cache HttpClient instances in static
> maps keyed by SSLContext identity and never remove entries. TLS endpoint
> reloads or repeated CamelContext creation can accumulate retained clients and
> key/trust manager graphs.
> h2. Proposed scope
> Introduce lifecycle-owned probe transports with safe sharing/reference
> counting or another bounded ownership design. Close clients where the
> supported JDK permits it. Do not rely solely on weak keys because a client
> can retain its SSLContext. Preserve transport parity between decision and
> health requests.
> h2. Acceptance criteria / validation
> * Repeated TLS endpoint restart, route reload and CamelContext disposal do
> not grow retained probe resources indefinitely.
> * Shared live users remain usable when one endpoint stops.
> * Existing TLS readiness and policy lifecycle tests continue passing.
> h2. References
> *
> https://github.com/apache/camel/blob/5686684cb418/components/camel-opa/src/main/java/org/apache/camel/component/opa/OpaHealthProbe.java#L60
> *
> https://github.com/apache/camel/blob/5686684cb418/components/camel-openfga/src/main/java/org/apache/camel/component/openfga/OpenFgaHealthProbe.java#L71
> Source: read-only component audit at 5686684cb418. Recheck current main
> before implementing; historical references identify the audited code.
> _AI-generated by Codex on behalf of oscerd (JIRA: acosentino)._
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
