This is an automated email from the ASF dual-hosted git repository.
smolnar82 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/knox.git
The following commit(s) were added to refs/heads/master by this push:
new 9f4b8e7fb KNOX-3388: Improve alias creation during EKU mode testing
(#1316)
9f4b8e7fb is described below
commit 9f4b8e7fbe9c4c09f79d27c58448c704fca8288d
Author: Sandor Molnar <[email protected]>
AuthorDate: Wed Jul 22 10:26:20 2026 +0200
KNOX-3388: Improve alias creation during EKU mode testing (#1316)
---
.../compose/single-eku/gateway-single-eku.sh | 19 +++++++++++--------
1 file changed, 11 insertions(+), 8 deletions(-)
diff --git a/.github/workflows/compose/single-eku/gateway-single-eku.sh
b/.github/workflows/compose/single-eku/gateway-single-eku.sh
index 1762c0839..fe82cdae8 100755
--- a/.github/workflows/compose/single-eku/gateway-single-eku.sh
+++ b/.github/workflows/compose/single-eku/gateway-single-eku.sh
@@ -35,13 +35,16 @@ PASS="horton"
# - gateway-truststore-password : server truststore password
# - gateway-identity-keystore-password : server identity keystore
password
# - gateway-identity-passphrase : server identity key passphrase
-for alias in \
- gateway-httpclient-keystore-password \
- gateway-httpclient-truststore-password \
- gateway-truststore-password \
- gateway-identity-keystore-password \
- gateway-identity-passphrase; do
- /knox-runtime/bin/knoxcli.sh create-alias "$alias" --value "$PASS"
-done
+#
+# Use the batch create-aliases command so all five aliases are created in a
+# SINGLE knoxcli JVM boot. Creating them one-per-invocation cost ~6s of JVM
+# startup each (~30s total), which delayed the gateway bind past the CI wait
+# window and caused flaky "connection refused" failures in the mTLS suite.
+/knox-runtime/bin/knoxcli.sh create-aliases \
+ --alias gateway-httpclient-keystore-password --value "$PASS" \
+ --alias gateway-httpclient-truststore-password --value "$PASS" \
+ --alias gateway-truststore-password --value "$PASS" \
+ --alias gateway-identity-keystore-password --value "$PASS" \
+ --alias gateway-identity-passphrase --value "$PASS"
exec java -jar /knox-runtime/bin/gateway.jar
