[
https://issues.apache.org/jira/browse/CAMEL-24638?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on CAMEL-24638 started by Guillaume Nodet.
-----------------------------------------------
> camel-jdbc/camel-sql: implement SecretRotationAware to rebuild the pool on
> rotation
> -----------------------------------------------------------------------------------
>
> Key: CAMEL-24638
> URL: https://issues.apache.org/jira/browse/CAMEL-24638
> Project: Camel
> Issue Type: Sub-task
> Components: camel-jdbc, camel-sql
> Reporter: Andrea Cosentino
> Assignee: Guillaume Nodet
> Priority: Major
>
> Sub-task of CAMEL-24636.
> Adopt the {{SecretRotationAware}} SPI in camel-jdbc and camel-sql.
> Both components resolve a {{DataSource}} bean from the registry
> ({{JdbcComponent}} looks it up by name or by type, {{SqlComponent}} holds one
> directly). The {{DataSource}} is created once by Spring Boot, Quarkus or
> Camel Main with the credentials valid at startup, and clearing the endpoint
> registry during a context reload does not recreate it.
> The result is that a connection pool such as HikariCP goes on handing out
> connections authenticated with a revoked password, and new connections opened
> by the pool fail once the old credential is retired.
> On {{onSecretRotation}} the components should refresh the credentials the
> pool uses and evict the existing connections so that the pool
> re-authenticates. Where the underlying pool exposes a credential-update API
> this should be preferred over recreating the {{DataSource}}, since the bean
> may be shared with non-Camel code.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
