[
https://issues.apache.org/jira/browse/CAMEL-26835?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on CAMEL-26835 started by Andrea Cosentino.
------------------------------------------------
> camel-spiffe - test SVID rotation, agent recovery and context restart
> ---------------------------------------------------------------------
>
> Key: CAMEL-26835
> URL: https://issues.apache.org/jira/browse/CAMEL-26835
> Project: Camel
> Issue Type: Test
> Components: camel-spiffe
> Reporter: Andrea Cosentino
> Assignee: Andrea Cosentino
> Priority: Major
> Labels: authorization, camel-spiffe, component-audit
>
> h2. Problem / motivation
> Real SPIRE integration coverage exercises initial Workload API access and
> mTLS acceptance/rejection, but does not directly validate rotation and
> recovery promises over a long-lived SSLContext.
> h2. Proposed scope
> Extend SPIRE-backed fixtures and integration tests for short-TTL certificate
> rotation, trust-bundle updates, agent disconnect/reconnect and CamelContext
> restart. Separate behavior of new TLS handshakes from already-established
> sessions.
> h2. Acceptance criteria / validation
> * New handshakes observe a changed leaf serial without replacing the
> SSLContext.
> * Assert the documented behavior during disconnection and after recovery.
> * Verify watcher/source shutdown and recreation after context restart.
> * Use explicit Awaitility deadlines or native Camel timed assertions; no
> Thread.sleep.
> * Retain existing rootless/readiness infra fixes.
> h2. References
> *
> https://github.com/apache/camel/blob/5686684cb418/components/camel-spiffe/src/test/java/org/apache/camel/component/spiffe/integration/SpiffeMutualTlsIT.java
> *
> https://github.com/apache/camel/blob/5686684cb418/test-infra/camel-test-infra-spiffe
> h2. Context
> Additional coverage beyond resolved CAMEL-24733 and CAMEL-25436; do not
> recreate those initial integration-test and infrastructure fixes.
> Source: read-only component audit at 5686684cb418. Recheck current main
> before implementing; historical references identify the audited code.
> _AI-generated by Codex on behalf of oscerd (JIRA: acosentino)._
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
