redhat-cop / cert-utils-operator

Set of functionalities around certificates packaged in a Kubernetes operator
Apache License 2.0
94 stars 35 forks source link

Use ConfigMaps CreationDate for JKS CreateDate property #144

Closed vinzent closed 1 year ago

vinzent commented 1 year ago

This requires the keystore-go to be updated to v4 and this requires at least go 1.17. So i've updated to go 1.20 too.

I've added a new test case to check the equality of the JKS after two reconciles. The issues only started to exist, when then ca-bundle.crt contained many certs. So i've included the Mozilla CA list as testdata. Once I remove keystore.WithOrderedAliases(), the test fails.

Fixes #142

vinzent commented 1 year ago

I will now build the image and test it on our internal cluster.

vinzent commented 1 year ago

@raffaelespazzoli I can confirm, that with this patch applied, the ConfigMap truststore.jks is no more updated on every restart of the cert-utils-operator pods.

raffaelespazzoli commented 1 year ago

can you rebase?

vinzent commented 1 year ago

can you rebase?

done.