Long story short --->

While passing an ssh-key, which is retrieved from a secret in Openshift to apache-camel SFTP component its not able to connect the server; whereas if I directly pass a path of the actual ssh-key file w/o creating secret to the same component, it works just fine. The exception is, invalid key. I tried to read the key file in java and pass it as ByteArray as a privateKey parameter but no luck. Seems like passing the key as byte is not working as all possible means.

SFTP-COMPONENT Properties->

sftp:

host: my.sftp.server

port: 22

fileDirectory: /to

fileName: /app/home/file.txt

username: sftp-user

privateKeyFilePath: /var/run/secret/secret-volume/ssh-privatekey **(Also tried privateKey param with byte array)**

knownHostsFile: resource:classpath:keys/known_hosts

binary: true

Application Detail: I am using Openshift 3.11. Developing Camel-SpringBoot Micro-Integration services configured with fabric8 and spring-cloud-kubernetes plugins for deployment.

I am creating the secret as,

oc secrets new-sshauth sshsecret --ssh-privatekey=$HOME/.ssh/id_rsa

I have tried to refer secret with deployment.yml and bootstrap.yml

Using as env variable with secret-key-ref->

deployment.yml->

- name: SSH_SECRET

  valueFrom:

    secretKeyRef:

      name: sshsecret

      key: ssh-privatekey

bootstrap.yml->

spring:

  cloud:

    kubernetes:

      secrets:


        enabled: true

        enableApi: true

        name: sshsecret

Using as mounted volume->

deployment.yml->

volumeMounts:

- mountPath: /var/run/secret/secret-volume

  name: secret-volume

volumes:

- name: secret-volume

   secret:

      secretName: sshsecret

bootstrap.yml->

spring:

  cloud:

    kubernetes:

      secrets:

        enabled: true

        paths: /var/run/secret/secret-volume

Note: Once the service is deployed I can see the mounted volume is attached with the container and can even bash into the POD and go to the same directory and locate the private key, which completely intact.

Any help will be appreciated. Ask me all questions you need to know to solve this.