Skip to content

feat(cloud-native): add support for SSL connection to persistence #12198

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
moabu merged 7 commits into from
Sep 21, 2025
Merged

feat(cloud-native): add support for SSL connection to persistence #12198

moabu merged 7 commits into from
Sep 21, 2025
+259 −29

Conversation

@iromli
Copy link
Contributor

@iromli iromli commented Sep 19, 2025 •
edited
Loading

Prepare

Description

Target issue

closes #12197

Implementation Details

Some notable changes:

  • add new attributes to enforce SSL connection to persistence
  • mounted volumes for CA cert, client cert and key (used primarily by configurator to bypass locking while injecting secrets; other components will have files pulled from secrets)

Test and Document the changes

  • Static code analysis has been run locally and issues have been fixed
  • Relevant unit and integration tests have been added/updated
  • Relevant documentation has been updated if any (i.e. user guides, installation and configuration guides, technical design docs etc)

Please check the below before submitting your PR. The PR will not be merged if there are no commits that start with docs: to indicate documentation changes or if the below checklist is not selected.

  • I confirm that there is no impact on the docs due to the code changes in this PR.

@iromli
chore(cloud-native): adjust persistence configuration for SSL connection
bea717e 
Signed-off-by: iromli <isman.firmansyah@gmail.com>
@iromli
chore(charts): add support for SSL connection in janssen chart
ad065fe 
Signed-off-by: iromli <isman.firmansyah@gmail.com>
@iromli iromli self-assigned this Sep 19, 2025
@mo-auto
Copy link
Member

mo-auto commented Sep 19, 2025 •
edited
Loading

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)

@iromli
chore(charts): add support for SSL connection in janssen-all-in-one c…
87a024e 
…hart

Signed-off-by: iromli <isman.firmansyah@gmail.com>
@iromli
docs(cloud-native): add new secret keys for SSL connection to persist…
b49bd7c 
…ence

Signed-off-by: iromli <isman.firmansyah@gmail.com>
@iromli iromli requested a review from misba7 September 19, 2025 20:02
@mo-auto mo-auto added the comp-docs Touching folder /docs label Sep 19, 2025
@iromli
fix(cloud-native): override SSL connection to persistence only if ena…
12cef15 
…bled

Signed-off-by: iromli <isman.firmansyah@gmail.com>
@iromli
refactor(cloud-native): change default value of cnSqlSslMode attribute
fbfd2c9 
Signed-off-by: iromli <isman.firmansyah@gmail.com>
@iromli iromli marked this pull request as ready for review September 20, 2025 22:14
@iromli iromli requested a review from moabu as a code owner September 20, 2025 22:15
@moabu moabu merged commit 65819db into main Sep 21, 2025
1 of 2 checks passed
@moabu moabu deleted the cn-ssl-conn branch September 21, 2025 10:30
@mo-auto mo-auto mentioned this pull request Sep 22, 2025
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@moabu moabu moabu approved these changes

@misba7 misba7 misba7 approved these changes

Assignees

@iromli iromli

Labels

area-documentation Documentation needs to change as part of issue or PR comp-charts-jans comp-docker-jans-all-in-one Touching folder /docker-jans-all-in-one comp-docker-jans-auth-server comp-docker-jans-casa Touching folder /docker-jans-casa comp-docker-jans-cloudtools Touching folder /docker-jans-cloudtools comp-docker-jans-config-api comp-docker-jans-configurator comp-docker-jans-fido2 comp-docker-jans-link comp-docker-jans-persistence-loader comp-docker-jans-saml Touching folder /docker-jans-saml comp-docker-jans-scim comp-docs Touching folder /docs kind-feature Issue or PR is a new feature request

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

feat(cloud-native): add support for SSL connection to persistence

5 participants

@iromli @mo-auto @moabu @misba7