Andrea Cosentino created CAMEL-26835:
----------------------------------------

             Summary: camel-spiffe - test SVID rotation, agent recovery and 
context restart
                 Key: CAMEL-26835
                 URL: https://issues.apache.org/jira/browse/CAMEL-26835
             Project: Camel
          Issue Type: Test
          Components: camel-spiffe
            Reporter: Andrea Cosentino
            Assignee: Andrea Cosentino


h2. Problem / motivation
Real SPIRE integration coverage exercises initial Workload API access and mTLS 
acceptance/rejection, but does not directly validate rotation and recovery 
promises over a long-lived SSLContext.

h2. Proposed scope
Extend SPIRE-backed fixtures and integration tests for short-TTL certificate 
rotation, trust-bundle updates, agent disconnect/reconnect and CamelContext 
restart. Separate behavior of new TLS handshakes from already-established 
sessions.

h2. Acceptance criteria / validation
* New handshakes observe a changed leaf serial without replacing the SSLContext.
* Assert the documented behavior during disconnection and after recovery.
* Verify watcher/source shutdown and recreation after context restart.
* Use explicit Awaitility deadlines or native Camel timed assertions; no 
Thread.sleep.
* Retain existing rootless/readiness infra fixes.

h2. References
* 
https://github.com/apache/camel/blob/5686684cb418/components/camel-spiffe/src/test/java/org/apache/camel/component/spiffe/integration/SpiffeMutualTlsIT.java
* 
https://github.com/apache/camel/blob/5686684cb418/test-infra/camel-test-infra-spiffe

h2. Context
Additional coverage beyond resolved CAMEL-24733 and CAMEL-25436; do not 
recreate those initial integration-test and infrastructure fixes.

Source: read-only component audit at 5686684cb418. Recheck current main before 
implementing; historical references identify the audited code.

_AI-generated by Codex on behalf of oscerd (JIRA: acosentino)._



--
This message was sent by Atlassian Jira
(v10.3.26#10030026)

Reply via email to