resolving s3 tls connection issue

cfpb · Dec 10, 2024 · b8fdd25 · b8fdd25
1 parent bb213f7
commit b8fdd25
Showing 1 changed file with 26 additions and 15 deletions.
diff --git a/kubernetes/modified-lar/templates/deployment.yaml b/kubernetes/modified-lar/templates/deployment.yaml
@@ -22,16 +22,37 @@ spec:
         app: {{ include "modified-lar.name" . }}
         release: {{ .Release.Name }}
     spec:
+      initContainers:
+        - args:
+            - cp /opt/java/openjdk/lib/security/* /opt/docker/temporary/
+          command:
+            - /bin/sh
+            - -c
+            - --
+          image: 626560329871.dkr.ecr.us-east-1.amazonaws.com/hmda/hmda-auth:init-universal-12092025
+          name: hmda-init-universal
+          resources: {}
+          terminationMessagePath: /dev/termination-log
+          terminationMessagePolicy: File
+          volumeMounts:
+            - mountPath: /opt/docker/temporary
+              name: jksfolder
+      restartPolicy: Always
+      terminationGracePeriodSeconds: 30
       volumes:
         - name: tz-config
           hostPath:
             path: /usr/share/zoneinfo/America/New_York
+        - emptyDir: {}
+          name: jksfolder
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
           volumeMounts:
             - name: tz-config
               mountPath: /etc/localtime
+            - mountPath: /opt/java/openjdk/lib/security/
+              name: jksfolder
           securityContext:
             readOnlyRootFilesystem: true
             allowPrivilegeEscalation: false
@@ -44,6 +65,10 @@ spec:
               cpu: "4"
               memory: "2200Mi"
           env:
+            - name: _JAVA_OPTIONS
+              value: >
+                -Dhttps.protocols=SSLv3,TLSv1,TLSv1.1,TLSv1.2
+                -Dcom.sun.security.enableAIAcaIssuers=true
             - name: PG_HOST
               valueFrom:
                 secretKeyRef:
@@ -161,18 +186,4 @@ spec:
               valueFrom:
                 configMapKeyRef:
                   name: mlar-options-configmap
-                  key: createDispositionKafkaRecord
-          resources:
-{{ toYaml .Values.resources | indent 12 }}
-    {{- with .Values.nodeSelector }}
-      nodeSelector:
-{{ toYaml . | indent 8 }}
-    {{- end }}
-    {{- with .Values.affinity }}
-      affinity:
-{{ toYaml . | indent 8 }}
-    {{- end }}
-    {{- with .Values.tolerations }}
-      tolerations:
-{{ toYaml . | indent 8 }}
-    {{- end }}
+                  key: createDispositionKafkaRecord