[
https://issues.apache.org/jira/browse/NIFI-16509?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18132610#comment-18132610
]
ASF subversion and git services commented on NIFI-16509:
--------------------------------------------------------
Commit 506c564feb81580e5e52138c8b70673961c6a8bf in nifi's branch
refs/heads/main from David Handermann
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=506c564feb8 ]
NIFI-16509 Register custom Kubernetes HttpClientFactory (#11854)
* NIFI-16509 Registered custom Kubernetes HttpClientFactory
- Added HttpClientFactory extended from JDK implementation to use default Key
Store Type for Trust Store construction avoiding fallback to PKCS12
> Register Kubernetes HttpClientFactory for Loading Trust Store
> -------------------------------------------------------------
>
> Key: NIFI-16509
> URL: https://issues.apache.org/jira/browse/NIFI-16509
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Extensions
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Major
> Time Spent: 50m
> Remaining Estimate: 0h
>
> The {{nifi-kubernetes-client}} module includes a shared
> {{StandardKubernetesClientProvider}} that handles construction of the Fabric8
> {{KubernetesClient}} for Leader Election and ConfigMap operations. The
> default behavior of the {{KubernetesClientBuilder}} attempts to add
> Kubernetes API certificates to the configured trust store, but falls back to
> constructing a new trust store using {{PKCS12}} when the configured [trust
> store|https://github.com/fabric8io/kubernetes-client/blob/main/kubernetes-client-api/src/main/java/io/fabric8/kubernetes/client/internal/CertUtils.java#L119]
> is not writable.
> Rather than relying on this fallback behavior, a custom {{HttpClientFactory}}
> should be implemented and registered to use the default Key Store Type for
> constructing a new Trust Store, avoiding the hard-coding issues associated
> with {{{}PKCS12{}}}.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
