Skip to content

Configure DWO with tlsCertificateConfigmapRef when certificates imported to che-operator #23870

Description

@tolusha

Is your task related to a problem? Please describe

Starting a DevWorkspace from a devfile fails if:

  • the parent devfile is referenced by a URI;
  • the remote endpoint serving the parent devfile uses a certificate that is not trusted by the DevWorkspace Operator
Image

Describe the solution you'd like

The user should follow the documentation for importing untrusted TLS certificates [1].

The Che Operator can automatically configure DevWorkspace Operator (DWO) to trust these certificates by setting the DWO certificate configuration to reference the ca-certs-merged ConfigMap in the eclipse-che namespace.

[1] https://eclipse.dev/che/docs/stable/administration-guide/importing-untrusted-tls-certificates/

Additional tasks

  • Che operator should respect custom labels on ca-certs-merged CM

Describe alternatives you've considered

No response

Additional context

No response

Metadata

Metadata

Assignees

Labels

area/che-operatorIssues and PRs related to Eclipse Che Kubernetes Operatorarea/devworkspace-operatorkind/taskInternal things, technical debt, and to-do tasks to be performed.severity/P1Has a major impact to usage or development of the system.

Type

No type
No fields configured for issues without a type.

Projects

Status
Ready for Review

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions