[jboss-jira] [JBoss JIRA] (WFLY-12118) kubernetes.KUBE_PING using token does not verify CA and defaults to insecure stream

Radoslav Husar (Jira) issues at jboss.org
Thu May 23 09:41:00 EDT 2019


Radoslav Husar created WFLY-12118:
-------------------------------------

             Summary: kubernetes.KUBE_PING using token does not verify CA and defaults to insecure stream
                 Key: WFLY-12118
                 URL: https://issues.jboss.org/browse/WFLY-12118
             Project: WildFly
          Issue Type: Bug
          Components: Clustering
    Affects Versions: 17.0.0.Alpha1, 16.0.0.Final
            Reporter: Radoslav Husar
            Assignee: Radoslav Husar


The recommendation is to do verify is file is available:

{quote}If available, a certificate bundle is placed into the filesystem tree of each container at /var/run/secrets/kubernetes.io/serviceaccount/ca.crt, and should be used to verify the serving certificate of the apiserver.{quote}



--
This message was sent by Atlassian Jira
(v7.12.1#712002)


More information about the jboss-jira mailing list