Fortify HTTPTruststore Configuration Not Mounting Expected Files
I'm trying to configure a custom truststore for client certificate verification using httpTruststoreFileEntry and httpTruststorePasswordEntry. The files specified in httpTruststoreFileEntry and httpTruststorePasswordEntry should be mounted and accessible in /app/secrets/ per the webapp/secret templating, however, the files are not mounted despite correct(?) configuration and environment variables. Anyone with some expertise on this that can offer some insight as to what I might be missing? Thanks!
I've created a secret dubbed fortify-truststore containing:
data:
fortify-truststore.jks: <base64-encoded-truststore>
truststore-password.txt: <base64-encoded-password>
Fortify values include the below:
secretRef:
name: "fortify-truststore"
keys:
httpTruststoreFileEntry: "fortify-truststore.jks"
httpTruststorePasswordEntry: "truststore-password.txt"
Env variables do get passed, but /app/secrets still only contains the default chart managed fortify-ssc-secret file/s.
HTTP_SERVER_TRUSTSTORE_FILE: /app/secrets/fortify-truststore.jks
HTTP_SERVER_TRUSTSTORE_PASSWORD_FILE: /app/secrets/truststore-password.txt
ls -latr /app/secrets/
total 28
-rw-r--r--. 1 fortify fortify 24 Jan 3 02:43 truststore.password
-rw-r--r--. 1 fortify fortify 476 Jan 3 02:43 ssc.autoconfig
-rw-r--r--. 1 fortify fortify 24 Jan 3 02:43 ssc-service.jks.password
-rw-r--r--. 1 fortify fortify 24 Jan 3 02:43 ssc-service.jks.key.password
-rw-------. 1 fortify fortify 4304 Jan 3 02:43 ssc-service.jks