Scenario: Corporate Load Balancer requires SSL certificate to let Egress connections.
Problem: Need to find a way to attach SSL certificate into IDE Services, without modifying the container.
Solution: Modify Kubernetes config as per example below
# spec:
# containers:
# - name: name
# image: image
env:
- name: JAVA_TOOL_OPTIONS
value: " -Djavax.net.ssl.keyStore=/certs/cert.pfx -Djavax.net.ssl.keyStoreType=PKCS12 -Djavax.net.ssl.keyStorePassword=tbeserver"
volumeMounts:
- name: keyStore
mountPath: "/certs"
volumes:
- name: keyStore
secret:
secretName: mycert
items:
- key: cert
path: cert.pfx
P.S. More info on JAVA_TOOL_OPTIONS in the documentaion: https://www.jetbrains.com/help/ide-services/advanced-configuration.html#jvm-options-for-server
Comments
0 comments
Please sign in to leave a comment.