artemiscloud / activemq-artemis-operator

Apache License 2.0
66 stars 62 forks source link

Trust secret doesn't support bundle with multiple source certificates #944

Closed brusdev closed 3 months ago

brusdev commented 3 months ago

Describe the bug When the trust secret has multiple source certificates, the broker pods only trust one, i.e.

apiVersion: trust.cert-manager.io/v1alpha1
kind: Bundle
metadata:
  name: my-bundle
spec:
  sources:
  - secret:
      name: "my-foo-cert-secret"
      key: "tls.crt"
  - secret:
      name: "my-bar-cert-secret"
      key: "tls.crt"
  target:
    secret:
      key: "root-certs.pem"
apiVersion: broker.amq.io/v1beta1
kind: ActiveMQArtemis
metadata: 
  name: broker
spec:
  acceptors:
    - name: tls-acceptor
      port: 61617
      sslEnabled: true
      needClientAuth: true
      sslSecret: my-broker-cert-secret
      trustSecret: my-bundle

[!TIP] Vote this issue reacting with :+1: or :-1:

brusdev commented 3 months ago

Resolved by https://github.com/artemiscloud/activemq-artemis-operator/commit/416f9dbda97a4d9951c0f956b8186c9cfa1638a3