Skip to content

Fix scale-to-zero with authenticated Coherence health mutators (Bug 40013873) - #886

Merged
vasac merged 6 commits into
mainfrom
zero-scale-2
Oct 1, 2026
Merged

vasac merged 6 commits into
mainfrom
zero-scale-2

Conversation

@vasac

@vasac vasac commented Sep 30, 2026

Copy link
Copy Markdown
Member

Coherence health endpoint hardening removed GET mutators and requires explicit enablement and authentication. The Operator’s generated GET /suspend therefore fails, blocking scale-to-zero.

This change:

  • Uses PUT /suspend and adds method-aware HTTP actions with Secret-backed Basic authentication and verified TLS.
  • Adds opt-in healthMutatorConnection configuration, including Coherence TLS and JAAS setup, a packaged credential validator, and HTTPS health probes.
  • Propagates suspension failures through scaling and finalization, blocking scale-to-zero when authentication or TLS verification fails.
  • Preserves explicit custom probes and legacy health-server behavior.
  • Corrects ReadyAction result reporting and prevents repeated execution while a Pod remains Ready.
  • Adds configuration examples, admission coverage, and CI workflows for client, Java support, and runtime acceptance tests.

Recorded runtime qualification with Coherence CE 15.1.1-0-5 demonstrated authentication checks, invalid-trust rejection, scale-to-zero and restart, stable PVC identity, and recovery of 257 persistent entries. CE 22.06.18 passed startup and HTTPS/authentication smoke checks.

@oracle-contributor-agreement oracle-contributor-agreement Bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Sep 30, 2026
@vasac
vasac requested a review from fryp September 30, 2026 21:35
Comment thread .github/workflows/health-mutator-tests.yaml Fixed
@sonarqubecloud

Copy link
Copy Markdown

@vasac
vasac merged commit 8f21594 into main Oct 1, 2026
75 of 78 checks passed
@vasac
vasac deleted the zero-scale-2 branch October 1, 2026 05:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OCA Verified All contributors have signed the Oracle Contributor Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants