SSL.keystore.location can't find JKS file in my Kubernetes secrets mount

5/15/2020

I have created a secret for my JKS file under volume mount /etc/secrets/keystore. I am accessing my JKS file path as an environment variable where ssl.keystore.location gets resolved as file:///etc/secrets/keystore/ssl.jks. But I get exception from SSL engine builder that modification time of keystore couldn't be found and java.nio.file.NoSuchFile Exception file:/etc/secrets/keystore/ssl.jks

-- victor perfect
docker
kubernetes
kubernetes-secrets
spring-kafka
ssl

1 Answer

5/15/2020

Remove the file://. The keystore is opened by the Kafka client, not Spring.

Kafka knows nothing about Spring's Resource abstraction; you need to provide just the path to the file (relative or absolute).

-- Gary Russell
Source: StackOverflow