Skip to content

Can't install Camel-K operator using a maven caSecrets settings. #6060

Open
@mss55

Description

@mss55

What happened?

During operator installation, an error occurs when using custom maven caCerts.
IntegrationPlatform and CamelCatalog go into the Ready state. but Kamelets are not created.

Same errors occurs during integration build.
We are using custom JDK base image patched with custom certs and looks like the required cert is imported from /opt/java/openjdk/lib/security/cacerts rather than caSecrets.

Related to #6030

Steps to reproduce

  1. Create secret kubectl create secret generic maven-ca-certs --from-file=cert.crt=./cert.crt -n camel26
  2. Check created secret
$kubectl describe secret maven-ca-certs -n camel26
Name:         maven-ca-certs
Namespace:    camel26
Labels:       <none>
Annotations:  <none>

Type:  Opaque

Data
====
cert.crt:  1838 bytes
  1. Install operator
  2. Create IntegrationPlatform like this
apiVersion: camel.apache.org/v1
kind: IntegrationPlatform
metadata:
  annotations:                           
    camel.apache.org/operator.id: camel-k
  labels:
    app: camel-k
  name: camel-k
spec:
  build:
    baseImage: artifactory/jvm-release-docker/temurin/temurin17-jdk:17.0.13_11-debian-upd1
    maven:
      caSecrets:
      - key: cert.crt
        name: maven-ca-certs
      settings:
        configMapKeyRef:
          key: settings.xml
          name: maven-settings

Relevant log output

{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.controller.build","msg":"State transition","request-namespace":"camel26","request-name":"kit-cudp77s8i41c73f38dl0","api-version":"camel.apache.org/v1","kind":"Build","ns":"camel26","name":"kit-cudp77s8i41c73f38dl0","phase-from":"Pending","phase-to":"Running"}
{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.builder","msg":"running builder task builder in context directory: /tmp/kit-cudp77s8i41c73f38dl0-2026021853"}
{"level":"error","ts":"2025-01-30T14:58:39Z","logger":"camel-k.keytool","msg":"Executed command: /opt/java/openjdk/bin/keytool -importcert -noprompt -alias maven-0 -storepass XAiYcjFeob -keystore trust.jks","stacktrace":"github.com/apache/camel-k/v2/pkg/util/log.Logger.Error\n\tgithub.com/apache/camel-k/v2/pkg/util/log/log.go:80\ngithub.com/apache/camel-k/v2/pkg/util/jvm.init.func2\n\tgithub.com/apache/camel-k/v2/pkg/util/jvm/keystore.go:41\ngithub.com/apache/camel-k/v2/pkg/util.RunAndLog\n\tgithub.com/apache/camel-k/v2/pkg/util/command.go:35\ngithub.com/apache/camel-k/v2/pkg/util/jvm.GenerateKeystore\n\tgithub.com/apache/camel-k/v2/pkg/util/jvm/keystore.go:52\ngithub.com/apache/camel-k/v2/pkg/builder.generateJavaKeystore\n\tgithub.com/apache/camel-k/v2/pkg/builder/project.go:98\ngithub.com/apache/camel-k/v2/pkg/builder.(*builderStep).execute\n\tgithub.com/apache/camel-k/v2/pkg/builder/steps.go:46\ngithub.com/apache/camel-k/v2/pkg/builder.(*builderTask).Do\n\tgithub.com/apache/camel-k/v2/pkg/builder/builder.go:101\ngithub.com/apache/camel-k/v2/pkg/controller/build.(*monitorRoutineAction).runBuild\n\tgithub.com/apache/camel-k/v2/pkg/controller/build/monitor_routine.go:168"}
{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.controller.integrationkit","msg":"State transition","request-namespace":"camel26","request-name":"kit-cudp77s8i41c73f38dl0","api-version":"camel.apache.org/v1","kind":"IntegrationKit","ns":"camel26","name":"kit-cudp77s8i41c73f38dl0","phase-from":"Build Submitted","phase-to":"Build Running"}
{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.controller.integrationkit","msg":"Invoking action build","request-namespace":"camel26","request-name":"kit-cudp77s8i41c73f38dl0","api-version":"camel.apache.org/v1","kind":"IntegrationKit","ns":"camel26","name":"kit-cudp77s8i41c73f38dl0"}
{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.controller.integrationkit","msg":"Build running","request-namespace":"camel26","request-name":"kit-cudp77s8i41c73f38dl0","api-version":"camel.apache.org/v1","kind":"IntegrationKit","ns":"camel26","name":"kit-cudp77s8i41c73f38dl0"}
{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.keytool","msg":"Certificate was added to keystore"}
{"level":"error","ts":"2025-01-30T14:58:39Z","logger":"camel-k.keytool","msg":"Executed command: /opt/java/openjdk/bin/keytool -importkeystore -noprompt -srckeystore /opt/java/openjdk/lib/security/cacerts -srcstorepass changeit -destkeystore trust.jks -deststorepass XAiYcjFeob","stacktrace":"github.com/apache/camel-k/v2/pkg/util/log.Logger.Error\n\tgithub.com/apache/camel-k/v2/pkg/util/log/log.go:80\ngithub.com/apache/camel-k/v2/pkg/util/jvm.init.func2\n\tgithub.com/apache/camel-k/v2/pkg/util/jvm/keystore.go:41\ngithub.com/apache/camel-k/v2/pkg/util.RunAndLog\n\tgithub.com/apache/camel-k/v2/pkg/util/command.go:35\ngithub.com/apache/camel-k/v2/pkg/util/jvm.GenerateKeystore\n\tgithub.com/apache/camel-k/v2/pkg/util/jvm/keystore.go:69\ngithub.com/apache/camel-k/v2/pkg/builder.generateJavaKeystore\n\tgithub.com/apache/camel-k/v2/pkg/builder/project.go:98\ngithub.com/apache/camel-k/v2/pkg/builder.(*builderStep).execute\n\tgithub.com/apache/camel-k/v2/pkg/builder/steps.go:46\ngithub.com/apache/camel-k/v2/pkg/builder.(*builderTask).Do\n\tgithub.com/apache/camel-k/v2/pkg/builder/builder.go:101\ngithub.com/apache/camel-k/v2/pkg/controller/build.(*monitorRoutineAction).runBuild\n\tgithub.com/apache/camel-k/v2/pkg/controller/build/monitor_routine.go:168"}
{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.keytool","msg":"Importing keystore /opt/java/openjdk/lib/security/cacerts to trust.jks..."}
{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.keytool","msg":"Importing keystore /opt/java/openjdk/lib/security/cacerts to trust.jks..."}
{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.keytool","msg":"Entry for alias cn_digicert_assured_id_root_g2,ou_wwwdigicertcom,o_digicert_inc,c_us [jdk] successfully imported."}
{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.keytool","msg":"Entry for alias cn_cfca_ev_root,o_china_financial_certification_authority,c_cn [jdk] successfully imported."}
{"level":"info","ts":"2025-01-30T14:58:39Z","logger":"camel-k.keytool","msg":"Entry for alias cn_hipki_root_ca__g1,o_chunghwa_telecom_co__ltd,c_tw [jdk] successfully imported."}

.... MANY STRING LIKE THIS

"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.keytool","msg":"Entry for alias cn_sslcom_root_certification_authority_ecc,o_ssl_corporation,l_houston,st_texas,c_us [jdk] successfully imported."}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.keytool","msg":"Import command completed:  152 entries successfully imported, 0 entries failed or cancelled"}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.keytool","msg":""}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.keytool","msg":"Warning:"}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.keytool","msg":"<cn_swisssign_silver_ca__g2,o_swisssign_ag,c_ch [jdk]> uses the SHA1withRSA signature algorithm which is considered a security risk. This algorithm will be disabled in a future update."}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.keytool","msg":"<cn_twca_root_certification_authority,ou_root_ca,o_taiwanca,c_tw [jdk]> uses the SHA1withRSA signature algorithm which is considered a security risk. This algorithm will be disabled in a future update."}

.... MANY STRING LIKE THIS

{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.keytool","msg":"<cn_aaa_certificate_services,o_comodo_ca_limited,l_salford,st_greater_manchester,c_gb [jdk]> uses the SHA1withRSA signature algorithm which is considered a security risk. This algorithm will be disabled in a future update."}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.keytool","msg":"<cn_quovadis_root_ca_3,o_quovadis_limited,c_bm [jdk]> uses the SHA1withRSA signature algorithm which is considered a security risk. This algorithm will be disabled in a future update."}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.maven.build","msg":"Executed command: /usr/bin/cp --recursive /usr/share/maven/mvnw/. ."}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.maven","msg":"executing: ./mvnw -V --no-transfer-progress -Dstyle.color=never package -Dmaven.test.skip=true -Dmaven.repo.local=/etc/maven/m2 --global-settings /tmp/kit-cudp77s8i41c73f38dl0-2026021853/maven/settings.xml --settings /tmp/kit-cudp77s8i41c73f38dl0-2026021853/maven/user-settings.xml","MAVEN_OPTS":"-Djavax.net.ssl.trustStore=/tmp/kit-cudp77s8i41c73f38dl0-2026021853/trust.jks -Djavax.net.ssl.trustStorePassword=XAiYcjFeob"}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.maven.build","msg":"Executed command: ./mvnw -V --no-transfer-progress -Dstyle.color=never package -Dmaven.test.skip=true -Dmaven.repo.local=/etc/maven/m2 --global-settings /tmp/kit-cudp77s8i41c73f38dl0-2026021853/maven/settings.xml --settings /tmp/kit-cudp77s8i41c73f38dl0-2026021853/maven/user-settings.xml"}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.maven.build","msg":"Apache Maven 3.8.6 (84538c9988a25aec085021c365c560670ad80f63)"}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.maven.build","msg":"Maven home: /usr/share/maven/wrapper/dists/apache-maven-3.8.6-bin/5f1464e3/apache-maven-3.8.6"}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.maven.build","msg":"Java version: 17.0.13, vendor: Eclipse Adoptium, runtime: /opt/java/openjdk"}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.maven.build","msg":"Default locale: en_US, platform encoding: UTF-8"}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.maven.build","msg":"OS name: \"linux\", version: \"6.1.77-flatcar\", arch: \"amd64\", family: \"unix\""}
{"level":"info","ts":"2025-01-30T14:58:40Z","logger":"camel-k.maven.build","msg":"Scanning for projects..."}
{"level":"info","ts":"2025-01-30T14:58:41Z","logger":"camel-k.maven.build","msg":""}
{"level":"info","ts":"2025-01-30T14:58:41Z","logger":"camel-k.maven.build","msg":"---------< org.apache.camel.k.integration:camel-k-integration >---------"}
{"level":"info","ts":"2025-01-30T14:58:41Z","logger":"camel-k.maven.build","msg":"Building camel-k-integration 2.6.0-nightly"}
{"level":"info","ts":"2025-01-30T14:58:41Z","logger":"camel-k.maven.build","msg":"--------------------------------[ jar ]---------------------------------"}
{"level":"info","ts":"2025-01-30T15:00:24Z","logger":"camel-k.maven.build","msg":""}
{"level":"info","ts":"2025-01-30T15:00:24Z","logger":"camel-k.maven.build","msg":"--- maven-resources-plugin:2.6:resources (default-resources) @ camel-k-integration ---"}
{"level":"info","ts":"2025-01-30T15:00:27Z","logger":"camel-k.maven.build","msg":"Using 'UTF-8' encoding to copy filtered resources."}
{"level":"info","ts":"2025-01-30T15:00:27Z","logger":"camel-k.maven.build","msg":"Copying 1 resource"}
{"level":"info","ts":"2025-01-30T15:00:27Z","logger":"camel-k.maven.build","msg":""}
{"level":"info","ts":"2025-01-30T15:00:27Z","logger":"camel-k.maven.build","msg":"--- maven-compiler-plugin:3.1:compile (default-compile) @ camel-k-integration ---"}
{"level":"info","ts":"2025-01-30T15:00:32Z","logger":"camel-k.maven.build","msg":"No sources to compile"}
{"level":"info","ts":"2025-01-30T15:00:32Z","logger":"camel-k.maven.build","msg":""}
{"level":"info","ts":"2025-01-30T15:00:32Z","logger":"camel-k.maven.build","msg":"--- maven-resources-plugin:2.6:testResources (default-testResources) @ camel-k-integration ---"}
{"level":"info","ts":"2025-01-30T15:00:32Z","logger":"camel-k.maven.build","msg":"Not copying test resources"}
{"level":"info","ts":"2025-01-30T15:00:32Z","logger":"camel-k.maven.build","msg":""}
{"level":"info","ts":"2025-01-30T15:00:32Z","logger":"camel-k.maven.build","msg":"--- maven-compiler-plugin:3.1:testCompile (default-testCompile) @ camel-k-integration ---"}
{"level":"info","ts":"2025-01-30T15:00:32Z","logger":"camel-k.maven.build","msg":"Not compiling test sources"}
{"level":"info","ts":"2025-01-30T15:00:32Z","logger":"camel-k.maven.build","msg":""}
{"level":"info","ts":"2025-01-30T15:00:32Z","logger":"camel-k.maven.build","msg":"--- maven-surefire-plugin:2.12.4:test (default-test) @ camel-k-integration ---"}
{"level":"info","ts":"2025-01-30T15:00:33Z","logger":"camel-k.maven.build","msg":"Tests are skipped."}
{"level":"info","ts":"2025-01-30T15:00:33Z","logger":"camel-k.maven.build","msg":""}
{"level":"info","ts":"2025-01-30T15:00:33Z","logger":"camel-k.maven.build","msg":"--- maven-jar-plugin:2.4:jar (default-jar) @ camel-k-integration ---"}
{"level":"info","ts":"2025-01-30T15:00:33Z","logger":"camel-k.maven.build","msg":"Building jar: /tmp/kit-cudp77s8i41c73f38dl0-2026021853/maven/target/camel-k-integration-2.6.0-nightly.jar"}
{"level":"info","ts":"2025-01-30T15:00:33Z","logger":"camel-k.maven.build","msg":""}
{"level":"info","ts":"2025-01-30T15:00:33Z","logger":"camel-k.maven.build","msg":"--- quarkus-maven-plugin:3.15.1:build (build-integration) @ camel-k-integration ---"}
{"level":"info","ts":"2025-01-30T15:00:52Z","logger":"camel-k.maven.build","msg":"[io.quarkus.arc.deployment.SplitPackageProcessor] Detected a split package usage which is considered a bad practice and should be avoided. Following packages were detected in multiple archives: "}
{"level":"info","ts":"2025-01-30T15:00:52Z","logger":"camel-k.maven.build","msg":"- \"org.apache.camel.spring\" found in [org.apache.camel:camel-spring-main:4.8.3, org.apache.camel:camel-spring:4.8.3]"}
{"level":"info","ts":"2025-01-30T15:00:53Z","logger":"camel-k.maven.build","msg":"[io.quarkus.deployment.QuarkusAugmentor] Quarkus augmentation completed in 2587ms"}
{"level":"info","ts":"2025-01-30T15:00:53Z","logger":"camel-k.maven.build","msg":"------------------------------------------------------------------------"}
{"level":"info","ts":"2025-01-30T15:00:53Z","logger":"camel-k.maven.build","msg":"BUILD SUCCESS"}
{"level":"info","ts":"2025-01-30T15:00:53Z","logger":"camel-k.maven.build","msg":"------------------------------------------------------------------------"}
{"level":"info","ts":"2025-01-30T15:00:53Z","logger":"camel-k.maven.build","msg":"Total time:  02:12 min"}
{"level":"info","ts":"2025-01-30T15:00:53Z","logger":"camel-k.maven.build","msg":"Finished at: 2025-01-30T15:00:53Z"}
{"level":"info","ts":"2025-01-30T15:00:53Z","logger":"camel-k.maven.build","msg":"------------------------------------------------------------------------"}
{"level":"info","ts":"2025-01-30T15:00:53Z","logger":"camel-k.builder","msg":"running builder task package in context directory: /tmp/kit-cudp77s8i41c73f38dl0-2026021853"}
{"level":"info","ts":"2025-01-30T15:00:53Z","logger":"camel-k","msg":"Running spectrum task in context directory: /tmp/kit-cudp77s8i41c73f38dl0-2026021853/context"}

Camel K version

v2.6.0-nightly; v2.5.0

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions