From 93df9ee8d349ca9ae1d2755a25dbe16395fdbee8 Mon Sep 17 00:00:00 2001 From: Janis Date: Wed, 17 Jun 2026 10:01:38 +0200 Subject: [PATCH] fix(official-bots): resolve JWT verify key via MP env props (#416) The merged rollout set JWT_PUBLIC_KEY_PATH, but the running image's config never references it, so mp.jwt.verify.publickey.location stayed null and every token failed with "Verification key is unresolvable". Replace it with the MicroProfile properties the runtime reads directly (MP_JWT_VERIFY_PUBLICKEY_LOCATION, MP_JWT_VERIFY_ISSUER), pointing at the already-mounted ncs-jwt-keys public key. No image rebuild needed. Co-Authored-By: Claude Opus 4.8 Reviewed-on: https://git.janis-eccarius.de/NowChess/GitOps/pulls/416 --- nowchess/base/nowchess-rollouts.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/nowchess/base/nowchess-rollouts.yaml b/nowchess/base/nowchess-rollouts.yaml index 108dc04..b13b0ad 100755 --- a/nowchess/base/nowchess-rollouts.yaml +++ b/nowchess/base/nowchess-rollouts.yaml @@ -441,8 +441,10 @@ spec: key: INTERNAL_SECRET - name: ACCOUNT_SERVICE_URL value: http://nowchess-account:8083 - - name: JWT_PUBLIC_KEY_PATH + - name: MP_JWT_VERIFY_PUBLICKEY_LOCATION value: /secrets/jwt/public.pem + - name: MP_JWT_VERIFY_ISSUER + value: nowchess volumeMounts: - name: jwt-keys mountPath: /secrets/jwt