Skip to content

fix: fall back to TLS trust when cluster CA path is missing#317

Draft
adietish wants to merge 10 commits into
redhat-developer:mainfrom
adietish:crw-11253
Draft

fix: fall back to TLS trust when cluster CA path is missing#317
adietish wants to merge 10 commits into
redhat-developer:mainfrom
adietish:crw-11253

Conversation

@adietish

@adietish adietish commented Jun 12, 2026

Copy link
Copy Markdown
Collaborator

@coderabbitai

coderabbitai Bot commented Jun 12, 2026

Copy link
Copy Markdown

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: e462fab3-f8dc-4db4-be8c-424e5cd71978

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@adietish adietish self-assigned this Jun 12, 2026
@codecov-commenter

codecov-commenter commented Jun 12, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 29.49389% with 404 lines in your changes missing coverage. Please review.
✅ Project coverage is 28.09%. Comparing base (71098f6) to head (c0a8be0).
⚠️ Report is 358 commits behind head on main.

Files with missing lines Patch % Lines
...evtools/gateway/auth/tls/DefaultTlsTrustManager.kt 14.14% 81 Missing and 4 partials ⚠️
...ools/gateway/view/steps/DevSpacesServerStepView.kt 0.00% 75 Missing ⚠️
...ools/gateway/auth/tls/ui/TLSTrustDecisionDialog.kt 0.00% 51 Missing ⚠️
...evtools/gateway/auth/code/OpenShiftAuthCodeFlow.kt 9.75% 36 Missing and 1 partial ⚠️
.../view/steps/auth/AbstractAuthenticationStrategy.kt 0.00% 30 Missing ⚠️
...vtools/gateway/auth/tls/ui/UITlsDecisionAdapter.kt 0.00% 23 Missing ⚠️
...ools/gateway/openshift/OpenShiftKubeConfigUtils.kt 56.25% 16 Missing and 5 partials ⚠️
...steps/auth/OpenShiftOAuthAuthenticationStrategy.kt 0.00% 19 Missing ⚠️
...devtools/gateway/auth/code/HttpClientExtensions.kt 36.00% 15 Missing and 1 partial ⚠️
...vtools/gateway/openshift/OpenShiftClientBuilder.kt 88.88% 5 Missing and 5 partials ⚠️
... and 14 more
Additional details and impacted files
@@            Coverage Diff             @@
##            main     #317       +/-   ##
==========================================
+ Coverage   0.00%   28.09%   +28.09%     
==========================================
  Files          4      106      +102     
  Lines         26     4350     +4324     
  Branches       0      799      +799     
==========================================
+ Hits           0     1222     +1222     
- Misses        26     2972     +2946     
- Partials       0      156      +156     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@adietish adietish force-pushed the crw-11253 branch 6 times, most recently from 2bbcc72 to 995e113 Compare June 17, 2026 12:12
adietish and others added 2 commits June 17, 2026 14:20
Stale or missing certificate-authority file paths in kubeconfig must not
break TLS trust resolution on a different machine.

Signed-off-by: Andre Dietisheim <adietish@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Use the TLS trust established in the wizard for post-login API connections
instead of kubeconfig CA settings or JVM default trust.

Signed-off-by: Andre Dietisheim <adietish@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@adietish adietish force-pushed the crw-11253 branch 3 times, most recently from b009333 to ed859e6 Compare June 17, 2026 12:49
adietish and others added 5 commits June 17, 2026 14:50
Signed-off-by: Andre Dietisheim <adietish@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Signed-off-by: Andre Dietisheim <adietish@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Signed-off-by: Andre Dietisheim <adietish@redhat.com>
Centralize kubeconfig cluster resolution in KubeConfigUtils as
getClusterByServer and drop the duplicate from KubeConfigTlsUtils.

Signed-off-by: Andre Dietisheim <adietish@redhat.com>
Use the Certificate Authority input when establishing TLS context so
user-provided paths and PEM data are honored before the trust dialog.

Signed-off-by: Andre Dietisheim <adietish@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@adietish adietish force-pushed the crw-11253 branch 3 times, most recently from 8b4bfef to bc40dfa Compare June 17, 2026 16:52
Parent trust prompts to the wizard, use invokeLater instead of invokeAndWait,
and split TLS setup from authentication so API and OAuth certificates can
both be accepted. Add TLS trust logging and surface OAuth discovery failures.

Signed-off-by: Andre Dietisheim <adietish@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Gateway] V0.0.16 can't connect with Openshift Oauth

2 participants