apache / solr-operator

Official Kubernetes operator for Apache Solr
https://solr.apache.org/operator
Apache License 2.0
243 stars 112 forks source link

Solr 9 SSL incompatibilities #599

Closed sarkaramrit2 closed 8 months ago

sarkaramrit2 commented 10 months ago

Solr 9.2.1 facing two issues:

HoustonPutman commented 10 months ago

The first one is SOLR-16934, and will be fixed in Solr 9.4.

The second one is an issue with how the Solr Operator calls the Solr API. Basically we don't always use a "correct" hostname, and instead use localhost. There is a new option in Solr 9.2.1 (SOLR-16735), -Dsolr.jetty.ssl.sniHostCheck, that acts in the same way that verifyHostName does. So we need to set both options according to what the user wants regarding verifyHostName. If they want to verifyHostName, then we need to make sure that the correct hostname is used when executing the liveness/readiness probes.

HoustonPutman commented 8 months ago

This has been fixed by #610